compare
crun vs youki
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | crun | youki |
|---|---|---|
| Language | C | Rust |
| Licence | GPL-2.0 | Apache-2.0 |
| Stars | 4.1k | 7.6k |
| Latest | 1.30.1 | v0.7.0 |
| Last push | 2026-10-06 | 2026-10-06 |
| Release cadence | about 24 days between releases | about 93 days between releases |
| Active contributors | 21 commit authors on the default branch in the last 90 days | 20 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace runc. Alternatives to runc →
Drop-incrunOCI runtime written in C, used by Podman by default.
Drop-inyoukiOCI runtime written in Rust.
crun
- 1.30.12026-09-25CVE-2026-84042: add a proper fix for it. The old version didn't include the correct patches.
- 1.302026-09-24CVE-2026-84042: prevent that rootful krun with passt can execute
- 1.29.12026-08-13linux: do not clobber the mount root mode for proc, sysfs and mqueue. A 1.29 regression copied the mountpoint directo…
- 1.292026-08-07linux: use the new mount API for more mount operations.
- 1.282026-05-27CVE-2026-47766: do not follow rootfs /dev symlinks. Open rootfs /dev with safe_openat before creating default or handl…
youki
- v0.7.02026-07-25feat(checkpoint): add CRIU version validation as prerequisite for checkpoint/restore
- v0.6.02026-02-25Add net device feature
- v0.5.72025-11-05This release addresses two CVEs. An update is recommended.
- v0.5.62025-10-27fix(3197): fix youki version command Part of Enhancing Compatibility with runc
- v0.5.52025-08-14If /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root f…
crun
✓ signed The latest release, 1.30.1, carries a signature GitHub verified.
Loading the security report
youki
✓ signed The latest release, v0.7.0, carries a signature GitHub verified.
Loading the security report