A minimal process supervisor and containerizer for Linux using namespaces and cgroups, written in Rust.
Lithos is a process supervisor and containerization tool for Linux that uses namespaces and cgroups to run services in isolated environments. It provides automatic restart of failing processes and in-place upgrades while maintaining a minimal design. Unlike system init systems, Lithos is intended as a base tool for building container orchestration solutions.
System administrators and developers building custom container orchestration systems who need a minimal, reliable process supervisor with containerization capabilities.
Developers choose Lithos for its minimal design, memory safety from being written in Rust, and zero runtime dependencies. It provides essential containerization features without unnecessary complexity, making it an ideal foundation for custom orchestration solutions.
Process supervisor that supports linux containers
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Lithos strictly provides only core containerization and supervision features, avoiding unnecessary bloat like image downloaders or network APIs, as emphasized in the README.
Written in Rust, Lithos ensures memory safety and has zero runtime dependencies, resulting in a minimal footprint and reliable performance for isolated environments.
It includes immediate restart of failing processes with rate limiting, ensuring high availability without system overload, as highlighted in the features list.
Lithos can be upgraded without affecting running child processes, reducing downtime during updates, which is a key feature mentioned in the documentation.
The README explicitly states it lacks an image downloader or builder, forcing users to rely on external tools like rsync for container images.
There is no built-in network API for remote orchestration, limiting its utility in distributed systems without additional custom layers.
The example setup involves vagrant and shell scripts, indicating a steeper learning curve and manual configuration compared to turnkey solutions.