Show HN: Kern – container and resource runtime in a 1.5 MB binary, no daemon

Kern is a lightweight container and resource runtime distributed as a single 1.52 MB binary with no daemon requirement, capable of launching real OCI containers in approximately 3.5 milliseconds with rootless, kernel-enforced isolation. It provides comprehensive resource management including CPU, memory, disk, and device allocation, along with security features like namespace isolation and seccomp filtering, while supporting standard container operations like image pulling and Dockerfile builds. The project positions itself as a unified solution combining container runtime, sandbox, resource management, and stack orchestration capabilities in one minimal static binary.