You can now run same OCI images as containers or Firecracker microVMs

Summary

⚡ 30-Second Install • 🚀 Quick Start • 🏗️ Architecture • 🎯 Why Pullrun? • 🗺️ Feature Map • ☸️ Kubernetes • 🤖 AI Agents Pullrun runs the same OCI image as a container or a VM. It stores layers in a content-addressed DAG (no overlayfs), syncs blocks peer-to-peer, and ships as a ~14 MB CLI + ~6 MB runtime daemon. Why this matters: Modern infrastructure uses too many execution engines — Docker for dev, containerd for production, Firecracker for isolation, CRI for Kubernetes, MCP agents for AI. Each has its own image format, storage, and operational model — even though they all run the same OCI images. Pullrun collapses these layers into one runtime. Key differentiators: Containers and VMs from the same image — no separate VM build step, no separate VM image format Content-addressed DAG store — zero-copy mmap reads, deduplicated by content hash, byte-identical across every node P2P image distribution — one registry pull per cluster, rest sync peer-to-peer at LAN speed ~14 MB CLI + ~6 MB runtime daemon (stripped) — no daemon required by default (CLI-only pullrun run), optional daemon for background services Also included: Kubernetes CRI shim (beta), Docker Compose support, MCP server for AI agents, policy engine (Cosign, SBOM, seccomp), P2P sync layer, and AES-256-GCM encrypted secrets — all in the same binary. # Apple Silicon VM (macOS default) — 3 s pullrun run alpine:3.18 --cmd "echo" --cmd "hello pullrun" --attach -t # Firecracker microVM (Linux) — 400 ms pullrun run alpine:3.18 --backend vm --cmd "echo" --cmd "hello pullrun" --attach -t # Container (Linux) — 400 ms pullrun run alpine:3.18 --cmd "echo" --cmd "hello pullrun" # Windows WSL2 — same image, same command, same store pullrun.exe run alpine:3.18 --cmd "echo" --cmd "hello pullrun" # One command, any platform curl -fsSL https://github.com/pullrun/pullrun/raw/main/install.sh | bash Platform What you get macOS brew tap pullrun/tap && brew install pullrun → native binary, no Xcode Linux APT package or direct downlo...