Aurae is a free and open source Rust project which houses a generic systems runtime daemon built specifically for enterprise distributed systems. Aurae is designed to work well with Kubernetes, and serves as an enterprise focused alternative to systemd.
Think of auraed as a pid 1 init machine daemon with a scope similar to systemd and functionality similar to containerd and firecracker.
Aurae brings SPIFFE/SPIRE (x509 mTLS) backed identity, authentication (authn) and authorization (authz) as low as the Unix domain socket layer in a distributed system.
Aurae exposes its functionality over a gRPC API which is referred to as the Aurae Standard Library.
A single Aurae instance has no awareness of higher order scheduling mechanisms such as the Kubernetes control plane. Aurae is designed to take ownership of a single machine, and expose the standard library a generic and meaningful way for higher order consumers.
Read Why fix Kubernetes and Systemd by Kris Nóva.
Aurae attempts to simplify and improve the stack in enterprise distributed systems by carving out a small portion of responsibility while offering a few basic guarantees with regard to state, synchronicity, awareness, and security.
Aurae brings enterprise identity as low as the socket layer in a system, which unlocks multi tenant workloads that run below tools like Kubernetes.
Aurae supports 3 types of workloads which can be started and scheduled alongside each other on a single machine.
- Executables (Regular executable processes on a host system. Similar to Systemd Units with ExecStart).
- Containers (A secure and opinionated container runtime is baked directly into the Aurae binary).
- Virtualization (A secure and opinionated hypervisor is baked directly into the Aurae binary).
Aurae offers a Turing complete scripting language written in Rust and similar to TypeScript called AuraeScript.
let execute = true; // Toggle execution
let aurae = connect(); // Connect to the daemon
aurae.info().json(); // Show identity
if execute {
// Execute "cat /etc/resolv.conf"
let runtime = aurae.runtime();
let example = exec("cat /etc/resolv.conf");
runtime.start(example).json();
}AuraeScript servers as one of many clients to the system and can be used to express workload manifests instead of YAML. AuraeScript can be used to control and gain visibility to the system.