asterkube v0.1 — Secure Kubernetes without Linux or C

Secure Kubernetes without Linux or C — a bootable Kubernetes node on the
Asterinas memory-safe Rust framekernel, with a
CGO-free Go userspace (the real upstream kubelet v1.35.6 as PID 1). No Linux kernel, no
systemd, no libc. Read the story: Secure Kubernetes Without Linux or C.

Sample images

Artifact	Size	Use
asterkube-node-v0.1.iso	41 MB	boot directly in QEMU / any hypervisor
asterkube-node-v0.1.qcow2	39 MB	attach as a disk in libvirt / cloud

Verify with sha256sum -c SHA256SUMS.

Try it

qemu-system-x86_64 -machine q35 -accel kvm -m 4G -nographic \
  -cdrom asterkube-node-v0.1.iso -netdev user,id=n0 -device virtio-net-pci,netdev=n0

It boots in under 5 seconds, DHCPs, runs its seccomp / MAC / container capability
demos, then stays LIVE — it will not power off on its own. Shut it down with an ACPI
event (virsh shutdown, or system_powerdown in the QEMU monitor), which it drains
gracefully.

Notes

• The node reports its OS as Asterinas but keeps the kubernetes.io/os=linux label —
  it runs the Linux ABI, so it is Linux-compatible, not Linux.
• This is an experimental proof of concept, largely AI-authored — not production-ready.
  virtio devices only; no CNI in the self-contained image (a joined node stays NotReady
  until one is added); the GRUB2 bootloader is the one remaining C component.

See the README and
docs/FEATURES.md for the full featureset.