sysbox
sysbox copied to clipboard
Add support for K8s.io KinD + Sysbox
The goal here is to allow KinD tool to be able to create K8s clusters running over Sysbox containers. Sysbox would offer the following benefits over KinD's default runtime (runc):
- Security: Sysbox would allow secure containers to be utilized as K8s-nodes -- currently KinD can only run over 'privileged' containers.
- Simplicity: KinD's Dockerfile images could be drastically simplified as Sysbox absorbs most of the complexity required to allow K8s execution.
- Flexibility: Sysbox imposes no restrictions on the docker images to utilize, so users would have more flexibility to define their own (customized) K8s-node images, including inner images corresponding to K8s components and/or applications.
The following issue has been filed in KinD's project to track this effort: kubernetes-sigs/kind#1772.
See this comment regarding the feasibility of realizing the simplicity and flexibility benefits: https://github.com/nestybox/sysbox/issues/70#issuecomment-692200331