GoKawiilKern launches as a 1.5 MB daemonless container runtime for untrusted code
Kern is a new open-source tool that runs rootless, kernel-enforced containers from a single 1.52 MB static binary, with no background daemon or socket required. It can pull and build OCI images, launch a sandboxed shell in about 3.5 milliseconds, and apply CPU, memory, disk and device limits either inside a sandbox or directly to processes on the host via named resource profiles set in a kern.toml file.