Pullrun

v0.1.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 1mo Containers & Orchestration

✓ No known CVEs patched

✓ No known CVEs patched in this version

Summary

AI summary

Updates runc, up/down/logs/build, and AES-256-GCM across a mixed release.

Full changelog

First public release of pullrun — a next-gen container runtime with zero-copy DAG storage and P2P image sync.

Run OCI images as Linux containers (runc), Firecracker microVMs, or Apple Silicon VMs
Zero-copy DAG store with rkyv + memmap2
P2P block sync across nodes (Bloom filter + gRPC)
Native Dockerfile build engine (no Docker required)
Compose support (up/down/logs/build)
Encrypted secrets (AES-256-GCM) and configs
Multi-arch pull, build, push, run
Full lifecycle: pending → running → exited, persistent rootfs
Interactive shells with detach/re-attach (Ctrl-P Ctrl-Q)
Policy engine (Cosign signatures, SBOM scanning)
Kubernetes CRI shim with Prometheus metrics

brew tap pullrun/tap
brew trust pullrun/tap
brew install pullrun

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Pullrun

Get notified when new releases ship.

About Pullrun