You can now run same OCI images as containers or Firecracker microVMs
The Pullrun project introduces a unified runtime and image management system designed to operate OCI-compliant images across diverse execution environments, including standard containers, Firecracker microVMs, Apple Silicon VMs, and Kubernetes workloads. Developed by the Pullrun team and published with a DOI (10.5281/zenodo.20679669), this work addresses the fragmentation of tooling and execution models in modern software deployment. Its core contribution is enabling users to employ a single OCI image artifact for multiple target platforms without requiring platform-specific image builds or separate VM image formats. This significantly simplifies development workflows and infrastructure management by reducing overhead associated with managing disparate artifact types. The intended audience comprises software engineers, DevOps professionals, and researchers involved in cloud-native development, containerization, and virtualized environments, who stand to benefit from reduced complexity and increased operational flexibility.
Key technical innovations underpinning Pullrun include a content-addressed Directed Acyclic Graph (DAG) store for image layers. This approach eschews traditional overlay filesystems, facilitating zero-copy memory-mapped reads and content-based deduplication across all nodes within a cluster. Image distribution is handled via a peer-to-peer (P2P) synchronization mechanism, reducing registry egress by pulling an image once per cluster and subsequently syncing layers locally. Furthermore, Pullrun integrates a unified CLI and runtime component under 25MB, eliminating the need for a heavy daemon in many use cases, offering a CLI-only pullrun run mode. The project also supports a Kubernetes Container Runtime Interface (CRI) shim and integration with AI agent frameworks (MCP), further extending its reach.
This unified approach has the potential to streamline the development and deployment lifecycle, enabling developers to build once and run anywhere with enhanced security and efficiency. It may influence the field by promoting a more cohesive ecosystem for container and VM execution, reducing the cognitive load on engineers and potentially lowering the barrier to adopting more secure or isolated execution environments like microVMs. The abstraction layer provided by Pullrun could pave the way for further innovations in workload portability and management across heterogeneous computing infrastructures. This analysis is based on the provided abstract and promotional material; a full paper was not available.