Apptainer is a container runtime platform designed for high-performance computing and shared systems, emphasizing simplicity, speed, and security. It provides a modular architecture with pluggable runtime engines (apptainer, fakeroot, OCI), a rich CLI interface for container operations, image building and management capabilities, security features (namespaces, capabilities, seccomp, encryption, signing), and an extensible plugin system. Originally forked from Singularity, it's now maintained as part of the Linux Foundation targeting mobility of compute in scientific and enterprise HPC environments.
Usernetes is a tool for deploying Kubernetes clusters without requiring root privileges on the host, mitigating potential container-breakout vulnerabilities. It supports two deployment modes: Kubernetes-in-Docker (using rootless container engines like Docker, Podman, or nerdctl) and Kubernetes-in-Kubernetes (running as UserNS-enabled pods in an existing Kubernetes cluster). The architecture is modular, consisting of a container image packaging Kubernetes components, Docker Compose/Kubernetes manifests for orchestration, a Makefile for management tasks, and helper scripts for initialization and networking. Key features include automatic subnet assignment based on hostname hashes, container engine detection, and seamless integration with kubeadm for cluster bootstrap.