Effortlessly compose, extend, and observe every service in real-time for the first time ever.
Crate
oci-spec
29
Repositories
90%
Actively maintained
26
Updated ≤ 30 days
76k
Total stars
26
Owners
Counted from the Cargo.toml manifests of the 29 indexed repositories that declare oci-spec as a dependency — not download counts. Dependency data last verified 2026-08-04.
Often used with
Crates that show up unusually often in oci-spec projects. The most distinctive pairings rank first — crates these projects use far more than the average indexed Rust project does, not just crates that are popular everywhere. Each percentage is the share of oci-spec projects that also use it.
oci-client34.5%caps27.6%rtnetlink17.2%seccompiler17.2%xattr17.2%protobuf31%procfs27.6%path-absolutize17.2%ipnetwork20.7%async-compression24.1%scopeguard27.6%serial_test31%nix75.9%comfy-table20.7%rcgen27.6%tonic41.4%tar62.1%rustix17.2%cfg-if34.5%tracing-opentelemetry27.6%opentelemetry37.9%hyper51.7%hyper-util41.4%which37.9%
Used by these organizations
29 repositories · 26 pushed in the last 30 days
Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.
⑂ 1.0k◎ 118
Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/
A container runtime written in Rust
⑂ 452◎ 144
🧱 local-first and microVM-backed programmable sandboxes for AI agents
Run any process, on your machine or in an AI agent's environment, as if it were a pod in your Kubernetes cluster: real env vars, DNS, network, traffic.
⑂ 208◎ 74
Hyperlight is a lightweight Virtual Machine Manager (VMM) designed to be embedded within applications. It enables safe execution of untrusted code within micro virtual machines with very low latency and minimal overhead.
⑂ 195◎ 212
A security-focused library OS supporting kernel- and user-mode execution
Compute substrate for AI agents: lightweight enough to live on your laptop, elastic enough to scale into the cloud and unleash unlimited resources.
⑂ 163◎ 248
Boot and upgrade via container images
⑂ 219◎ 321
A multi-sandbox container runtime that provides cloud-native, all-scenario multiple sandbox container solutions.
⑂ 118◎ 29
Facilitates running Wasm / WASI workloads managed by containerd
⑂ 130◎ 67
🐰 Bencher - Continuous Benchmarking
⑂ 40◎ 154
The lightest AI sandbox. A process-based sandbox for Linux, no container, no VM, no root, no prompt injection
⑂ 38◎ 23
Lightweight Sandbox Powered by a Purpose-Built VM and OS
⑂ 112◎ 247
Rust crates to extend containerd
⑂ 95◎ 3
Infrastructure for managed self-hosting
⑂ 8◎ 26
A containerd shim for running Spin Applications.
Signing-key abuse and update exploitation framework
Confidential Containers Guest Tools and Components
⑂ 185◎ 93
⑂ 30◎ 46
Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/
Rust library for the composefs filesystem
Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.
Dragonfly client written in Rust
Open standard for mathematical programming interoperability
MicroVM Runtime
Build Software You Can Trust. Isolated, reproducible development environments and a secure package manager that give your whole team identical environments, while keeping AI agents off the laptop.