compare
crun vs Kata Containers
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | crun | Kata Containers |
|---|---|---|
| Language | C | Rust |
| Licence | GPL-2.0 | Apache-2.0 |
| Stars | 4.1k | 8.9k |
| Latest | 1.30.1 | 4.2.0 |
| Last push | 2026-10-06 | 2026-10-06 |
| Release cadence | about 24 days between releases | about 30 days between releases |
| Active contributors | 21 commit authors on the default branch in the last 90 days | 39+ commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace runc. Alternatives to runc →
Drop-incrunOCI runtime written in C, used by Podman by default.
Drop-inKata ContainersOCI runtime that runs each container or pod in a lightweight virtual machine.
crun
- 1.30.12026-09-25CVE-2026-84042: add a proper fix for it. The old version didn't include the correct patches.
- 1.302026-09-24CVE-2026-84042: prevent that rootful krun with passt can execute
- 1.29.12026-08-13linux: do not clobber the mount root mode for proc, sysfs and mqueue. A 1.29 regression copied the mountpoint directo…
- 1.292026-08-07linux: use the new mount API for more mount operations.
- 1.282026-05-27CVE-2026-47766: do not follow rootfs /dev symlinks. Open rootfs /dev with safe_openat before creating default or handl…
crun
✓ signed The latest release, 1.30.1, carries a signature GitHub verified.
Loading the security report
Kata Containers
✓ signed The latest release, 4.2.0, carries a signature GitHub verified.
Loading the security report