Technical presentation - 30 minutes (including q&a)
libkrun is a dynamic library providing Virtualization-based process isolation capabilities or, in fewer words, a VMM in library form. Written in Rust and designed for minimal boot time and small footprint, it has evolved since its initial inception as a companion for crun (the OCI runtime used by podman) to cover multiple, different use cases: - Enabling containers on macOS to do AI inference by exposing a paravirtualized GPU to the guest. - Running x86_64 games in Asahi Linux (Aarch64) using DRM native context, guest to host shared memory and pipewire redirection through vsock. - Launching Confidential Computing Workloads leveraging on technologies such as SNP, TDX and ARM CCA. - Extending podman+crun to be able to seamlessly run containers inside microVMs in AutoSD (Automotive Stream Distribution). In this talk I'll briefly present libkrun's main features and characteristics, and then we'll explore in depth how the different use cases have benefited from them.