containerd
containercontainer-engineopen sourceThe core container runtime that manages the container lifecycle beneath Docker and Kubernetes.
containerd is the industry-standard low-level runtime that pulls images and manages the container lifecycle, sitting under Docker, Kubernetes, and nerdctl. It uses namespaces and cgroups like any container, sharing the host kernel. It supports pluggable runtimes, so it can drive gVisor (runsc) or a runtime for stronger isolation, but by itself it is a shared-kernel container manager.
Strengths
- Standard, stable core runtime under Docker and Kubernetes
- Pluggable runtime interface, can drive gVisor or microVM backends
- Minimal, well-audited surface for its job
Limitations
- Shared kernel, a container manager, not a hardware boundary
- Low-level plumbing, not an end-user dev tool by itself
- Isolation strength is whatever runtime you plug in
Files & editor
desktop-mountBind-mount your project; the host editor edits it directly.
How you get your project into the environment and edit it. Shared-kernel routes bind-mount host files for your desktop editor; own-kernel routes keep files in the guest, so a desktop editor attaches over remote, or you edit inside. Mounts and remote editing.