GravityKit
GravityKit folds every GravityView extension into one Pro plugin.
Comparison · Infra & APIs
KrakenD vs runc
A side-by-side editorial comparison of KrakenD and runc — release velocity, themes, recent moves, and the top alternatives to consider.
KrakenD vs runc: at a glance
What is KrakenD?
KrakenD's community edition is shipping only dependency bumps.
The two tracked KrakenD releases are patch releases of the community edition. 2.13.10 in August moved to Go 1.26.7, and 2.13.11 in September bumped the gRPC and RabbitMQ client libraries.
What is runc?
runc patches one restore bug across four release lines at once.
runc shipped 1.5.3, 1.4.4, 1.3.7 and 1.6.0-rc.2 on the same day, all fixing CVE-2026-119101: a crafted image could make runc restore bind-mount any host directory into a restored container, read-write. Only people who checkpoint and later restore untrusted containers as root are exposed. The 1.6.0 candidate also changes how mount destinations that start with the rootfs path are read, following the runtime spec literally.
KrakenD vs runc: editorial side-by-side
KrakenD
0.0INFRA · APIS
KrakenD's community edition is shipping only dependency bumps.
◆ Current state
The two tracked KrakenD releases are patch releases of the community edition. 2.13.10 in August moved to Go 1.26.7, and 2.13.11 in September bumped the gRPC and RabbitMQ client libraries.
◆ Where it's heading
The open-source gateway is in maintenance mode in this feed, kept current on Go and dependencies. Two entries are too few to say where the product is heading.
◆ Prediction
Unclear from these entries; more dependency patch releases are the only pattern visible.
runc
5.0INFRA · APIS
runc patches one restore bug across four release lines at once.
◆ Current state
runc shipped 1.5.3, 1.4.4, 1.3.7 and 1.6.0-rc.2 on the same day, all fixing CVE-2026-119101: a crafted image could make runc restore bind-mount any host directory into a restored container, read-write. Only people who checkpoint and later restore untrusted containers as root are exposed. The 1.6.0 candidate also changes how mount destinations that start with the rootfs path are read, following the runtime spec literally.
◆ Where it's heading
The project now maintains four supported branches and backports security work to each one in lockstep, while 1.6.0 keeps trading quiet tolerance for strict spec behaviour: refused read-only configs in rc.1, literal mount paths in rc.2. Users relying on runc's old lenient handling will feel 1.6.0 more than any feature it adds.
◆ Prediction
Expect 1.6.0 final after one more candidate, with 1.3.z ending since 1.3.7 is labelled the probable last patch.
Alternatives to KrakenD and runc
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either KrakenD or runc.
Payload CMS
Payload's v4 beta.9 keeps every past image crop and raises the Node floor again.
Nautobot
Nautobot 3.3 alpha 2 adds test helpers and a cable location filter after 3.2.9's token-leak fix.
Clair
Clair 4.10 RC can read SBOMs to match Java vulnerabilities.
Shuffle
Shuffle tags builds almost daily, but the notes are empty.
Velociraptor
Velociraptor's recent releases are mostly about patching CVEs.
See all KrakenD alternatives → · See all runc alternatives →
Recent activity from KrakenD and runc
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 2d agoruncCVE-2026-119101 fix for checkpoint/restore in the 1.5 line
- 2d agoruncSecond 1.6.0 candidate: restore CVE fix, literal mount paths
- 2d agorunc1.4 line gets the restore CVE fix and cgroup v2 crash workaround
- 2d agoruncLikely final 1.3 patch carries the restore CVE fix
- 1mo agoruncRelease candidate lifts 1024-CPU limit, removes deprecated APIs
- 1mo agoruncWorkaround for kernel bug that crashed runc on cgroup v2
- 2mo agoKrakenDKrakenD CE 2.13.11 bumps gRPC and RabbitMQ libraries
- 2mo agoKrakenDKrakenD CE 2.13.10 moves to Go 1.26.7
Frequently asked questions
What is the difference between KrakenD and runc?
They serve adjacent needs but don't currently overlap on shipped themes. runc is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is KrakenD better than runc?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. runc is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to KrakenD?
Top KrakenD alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "KrakenD alternatives" section above for the current picks, or visit /alternatives/krakend for the full list with editorial commentary on each.
What are the best alternatives to runc?
Top runc alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "runc alternatives" section above for the current picks, or visit /alternatives/runc for the full list with editorial commentary on each.