Running OCI Processes Inside a Multikernel Linux Child

Thu, 03 Sep 2026 00:00:00 +0000

In Turning Container Images into Multikernel Linux Roots, I described how an unpacked image becomes a private root for a child kernel. That gets the files into the right place, but files are not yet a running container. Something inside the child still has to interpret the OCI process configuration, establish its safety boundaries, start the executable, and translate later exec, signal, terminal, and wait requests.

Oci on Experiment, Fail, Learn, Repeat

Running OCI Processes Inside a Multikernel Linux Child