# crun

5 Hacker News commenters recommended crun and 3 criticized it, November 2025 to November 2026. It was recommended in 3 of 13 months.

**Verdict:** People recommend crun as a good-enough container runtime that the Linux community commonly uses. Critics say its defaults enable namespace-incompatible security features.

## Why people recommend it

- Good enough for containers (1 comments): "crun has just proven good enough" ([source](https://news.ycombinator.com/item?id=50203844))
- Common Linux community solution (1 comments): "the Linux community general solved via crun" ([source](https://news.ycombinator.com/item?id=48902753))

## What people warn about

- Defaults enable namespace-incompatible features (3 comments): "Crun just stamp couples security profiles as an example, so everything in the shared kernel that is namespace incompatible is enabled." ([source](https://news.ycombinator.com/item?id=46733485)) "if crun set reasonable defaults and restricted namespace incompatible features by default we would be in a better position" ([source](https://news.ycombinator.com/item?id=46606474)) "Crun just stamp couples security profiles as an example" ([source](https://news.ycombinator.com/item?id=46735708))
- Runtime quirks differ from runc (1 comments): "runtime quirks between runc and crun" ([source](https://news.ycombinator.com/item?id=47295306))

## Alternatives hackers recommend

- [Podman](https://hackerapproved.com/p/podman.md): 276 recommend
- [OrbStack](https://hackerapproved.com/p/orbstack.md): 97 recommend
- [Apple container](https://hackerapproved.com/p/apple-container.md): 56 recommend
- [gVisor](https://hackerapproved.com/p/gvisor.md): 45 recommend
- [Colima](https://hackerapproved.com/p/colima.md): 39 recommend

## Cite as

Hacker Approved, "crun", https://hackerapproved.com/p/crun/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).