Skip to content

Pullrun

Containers & Orchestration

A single‑binary OCI runtime that runs the same image as a container or microVM on macOS, Linux, and Windows without needing separate daemons or overlay filesystems.

Track releases GitHub
Rust Latest v0.7.6 · 11h ago Security brief →

Features

  • Runs the identical OCI image as both a lightweight container and a Firecracker‑based microVM on any platform.
  • Stores image layers in a content‑addressed DAG for zero‑copy, deduplicated block sharing across nodes.
  • Peer‑to‑peer (P2P) image distribution – pulls once from a registry then syncs locally at LAN speeds.
  • Distributed as one 12 MB statically linked binary; no persistent daemon required by default.

Recent releases

View all 27 releases →
Upgrade now
v0.7.6 Mixed
RCE / SSRF Breaking upgrade

Security + stability + initramfs

Open
Config change
v0.7.5 Bugfix
Breaking upgrade Auth

Fixes VM networking

Open
No immediate action
v0.7.4 Bug fix

Enter handling + startup block fix

Open
No immediate action
v0.7.3 Bug fix

Fix exec PID 0 success

Open
Upgrade now
v0.7.2 Security
Dependencies

quinn-proto update

Open

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
11
Forks
0
Languages
Rust Go TeX
View on GitHub

Install & Platforms

Install via
shell-script brew binary
Platforms
macos linux windows arm64

Similar tools

Dragoman
Mindwalk
Loopers
StyleSeed
Peek CLI

Beta — feedback welcome: [email protected]