Actual isolation primitives.
Separate process, mount, network, IPC, and hostname namespaces create a real container boundary you can inspect and learn from.
Qube is a lightweight Linux container runtime and manager written in Go. Pull images, isolate processes, set resource limits, expose ports, mount volumes, and manage workloads from one small binary.
No hidden orchestration layer. Qube works directly with Linux primitives: namespaces for isolation, cgroups v2 for resource controls, chroot-based filesystems, and a daemon for managed container lifecycle.
See how Qube is put together →Separate process, mount, network, IPC, and hostname namespaces create a real container boundary you can inspect and learn from.
Control memory and CPU through cgroups v2 instead of hiding resource management behind another abstraction.
A Go runtime, CLI, local management API, WebSockets, and daemon supervision in a project you can actually read end to end.
A Docker-like workflow without pretending to be Docker. Qube focuses on the core lifecycle: pull, run, inspect, execute, stop, snapshot.
$ ▋
qube runStart a workloadqube listSee managed containersqube evalExecute inside a containerqube snapshotCapture container stateThe runtime stays intentionally legible: user-facing tools feed a compact core, which configures Linux isolation and persists only the state it needs.
Put the runtime configuration beside your application with qube.yml. Ports, commands, environment variables, isolation, and volumes remain explicit.
container:
system: Voyrox:nodejs:25.2.0
ports:
- "3000"
cmd:
- npm install
- node index.js
isolated: false
environment:
NODE_ENV: "development"
LINUX ONLY · ROOT REQUIRED · CGROUPS V2 RECOMMENDED