This section introduces RunF. It is a RunC counterpart that is designed for running immutable function containers. RunF is an experimental project that uses libcontainer to implement a new runtime to run containers in the read-only and rootless environment. Containers started with RunF are expected to be running efficiently, even inside other containers. RunF allows rootless container execution by mapping a non-root user from the host to the root user's ID inside the container.
How can we use it? The following diagram illustrates the scenario. We have a FaaS platform, and the Gateway accepts the incoming request and forwards it to the function Initiator. Through the Event Bus, a Function Executor then uses it rather than Docker ...
