PouchContainer

Free plan APILinuxSelf-hosted

What PouchContainer is

PouchContainer is a free, open-source container engine from Alibaba Group for packaging, delivering, and running applications in a lightweight runtime. It supports OCI images, CNI and CSI standards, and Kubernetes CRI, so it can serve as a Kubernetes container runtime. A unified API creates either LXC-based containers or hypervisor-based runV containers. The project provides isolation options including LXCFS, directory disk quotas, a patched Linux kernel, and hypervisor-based containers. Dragonfly distributes container images through a peer-to-peer model. Users manage the service with the pouch command-line interface or RPC calls, and it supports image building. Optional build tags add seccomp filtering, AppArmor profiles, and SELinux labels. Installation documentation lists Alibaba Cloud Linux 2, Ubuntu, and CentOS. Building requires Linux kernel 3.10 or later. PouchContainer is licensed under Apache License 2.0 and is intended for cloud-native development or legacy application migration.

Who it suits

It suits developers building cloud-native applications or moving legacy applications to cloud platforms. Linux users needing Kubernetes CRI and multiple container runtime choices may also consider it.

What it does well

Free plan and open-source project
Supports OCI, CNI, CSI, and Kubernetes CRI
LXC and hypervisor-based runtime choices
Peer-to-peer image distribution through Dragonfly
Optional seccomp, AppArmor, and SELinux controls

What to know first

Conflicts with Docker on Ubuntu
Requires Linux kernel 3.10 or later to build
runV requires a physical machine
Maintained Ubuntu and CentOS versions are specified

Verdict

PouchContainer combines standards support, Kubernetes integration, image building, and selectable LXC or hypervisor runtimes. Check the Linux requirements and Docker conflict before installation, especially if runV isolation is needed.

Facts from PouchContainer's own pages

Compatibility: It supports OCI images, CNI and CSI standards, and Kubernetes CRI. · github.com, 9 Oct 2026
Docker conflict: The installation guide says PouchContainer conflicts with Docker and requires Docker to be uninstalled before installation on Ubuntu. · pouchcontainer.io, 9 Oct 2026
Image distribution: It uses Dragonfly for peer-to-peer container image distribution. · github.com, 9 Oct 2026
Intended users: The project says it is intended to help developers build cloud-native applications or migrate legacy applications to cloud platforms. · github.com, 9 Oct 2026
Isolation: It offers runtime isolation features including hypervisor-based containers, LXCFS, directory disk quotas, and a patched Linux kernel. · github.com, 9 Oct 2026
Kubernetes: PouchContainer natively implements Kubernetes Container Runtime Interface and documents using it as a Kubernetes container runtime. · github.com, 9 Oct 2026
License: The project is licensed under the Apache License, Version 2.0. · github.com, 9 Oct 2026
License and maker: The project identifies Alibaba Group as its creator and states that it is licensed under Apache License 2.0. · github.com, 9 Oct 2026
Management interfaces: The container management service can be accessed through the pouch CLI or RPC calls. · github.com, 9 Oct 2026
Physical machine requirement: The documented runV setup requires a physical machine and says nested virtual machines are not supported. · pouchcontainer.io, 9 Oct 2026
Platform requirement: The developer guide requires Linux kernel 3.10 or later to build PouchContainer. · pouchcontainer.io, 9 Oct 2026
Purpose: PouchContainer is an open-source container engine for packing, delivering, and running applications in a lightweight runtime. · github.com, 9 Oct 2026
Rich containers: Its rich-container mode adds services and hooks to container internals to help containers run like usual environments. · github.com, 9 Oct 2026
Runtime choices: A unified API can create both hypervisor-based runV containers and LXC-based containers. · pouchcontainer.io, 9 Oct 2026
Runtime overhead: The project describes its runtime overhead as significantly lower than VM-based technologies. · github.com, 9 Oct 2026
Runtime tradeoff: The runV documentation says hypervisor-based containers provide a clearer host boundary but add virtualization overhead and startup time. · pouchcontainer.io, 9 Oct 2026
Security options: Optional build tags enable seccomp syscall filtering, AppArmor profiles, and SELinux process and mount labels. · pouchcontainer.io, 9 Oct 2026
Standards: PouchContainer supports industry standards including CNI and CSI, and is compatible with the OCI image specification. · github.com, 9 Oct 2026
Support: The project directs users to GitHub issues or pull requests and lists [email protected] for urgent questions. · github.com, 9 Oct 2026
Supported systems: The installation guide lists Alibaba Cloud Linux 2, Ubuntu, and CentOS; it specifies maintained Ubuntu 16.04 and CentOS 7 versions. · pouchcontainer.io, 9 Oct 2026

Where PouchContainer stands on Freedom251

Container Engines#23 of 31