ocifbsd

FreeBSD-native OCI container runtime — jails as first-class containers.

ocifbsd runs OCI-compliant containers on FreeBSD using native jail(8), VNET, RCTL, and ZFS — no Linux emulation. It ships a full toolchain: image pull/push, pods and orchestration, a Raft-backed cluster daemon, a native ACME certificate client, and log forwarding. The whole tree builds from FreeBSD base with zero ports.

Self-containedBuilds with no ports — json-c and libcurl are vendored in-tree; links only FreeBSD base libraries. No GPL anywhere.
Native jailsEach container is a jail with VNET isolation, RCTL resource limits, and a ZFS-backed image store.
Full Raft clusterLeader election, log replication, persistence, membership changes, and snapshots — via ocifbsd-cluster(8).
Native ACMERFC 8555 client with ES256/JWS and HTTP-01 challenges, built on FreeBSD base OpenSSL 3.

ocifbsd maps OCI containers onto native FreeBSD jails; the cluster daemon adds Raft consensus over the gossip transport.

Section 8 — system management

ocifbsd(8)the main CLI — create, start, exec, stop, run, pull, push, load, images, rmi, network
ocifbsd-cluster(8)Raft cluster daemon — election, replication, membership, snapshots
ocifbsd-cert(8)certificate management — ACME (RFC 8555), rotation, backup, recovery
ocifbsd-logd(8)log aggregation and remote HTTP forwarding daemon
ocifbsd-gc(8)garbage collection daemon
ocifbsd-export(8)cloud export and migration tool
pam_ocifbsd(8)PAM authentication module

Section 3 — libraries

ocifbsd_image(3)OCI image management — pull, unpack, ZFS storage, references
ocifbsd_network(3)networking — bridge, VNET, CNI
ocifbsd_orchestration(3)pods, stacks, services, scheduling
ocifbsd_security(3)security policy and resource-limit library

HTML renderings of the ocifbsd manual pages, generated with mandoc -T html. © 2026 REVYTECH, Inc. — BSD-2-Clause. Vendored json-c (MIT) and libcurl (curl license) retain their upstream licenses.
Last generated: 2026-10-30 01:15 UTC