Lightweight Container
Orchestration
Lightweight Kubernetes-like container orchestration for Linux, macOS, and Windows. Native runtimes on every platform, encrypted overlay networking, and a single binary with no daemons to babysit.
Why ZLayer?
Purpose-built for simplicity, security, and performance. Everything you need, nothing you don't.
Cross-Platform Native
First-class support for Linux, macOS, and Windows. youki on Linux, Seatbelt on macOS, HCS native plus WSL2 delegate on Windows. No Docker Desktop required.
Daemonless on Linux
On Linux, each container runs as a direct child process via libcontainer. Complete control, full visibility, no daemon to keep alive.
Built-in Image Builder
Build OCI images directly from Dockerfile or ZImagefile YAML. buildah on Linux and macOS, native HCS-backed builder on Windows. No external tools required.
Encrypted Overlay Networks
Mesh networking via boringtun userspace WireGuard. IP allocation, DNS service discovery, and health checking. Wintun adapter on Windows.
Security First
Rootless containers, seccomp profiles, and namespace isolation. OpenID Connect SSO, RBAC with users, groups, and permissions, plus an audit log of every change.
GitOps & Multi-Tenancy
Project-scoped deployments with git polling, webhook receivers, environments, secrets, and credentials. Workflows compose tasks, builds, and deploys into DAGs.
Simple Configuration
Define your containers with familiar YAML syntax. Everything you need in one declarative file.
apiVersion: zlayer.dev/v1
kind: Container
metadata:
name: my-app
namespace: production
spec:
image: ghcr.io/myorg/myapp:latest
resources:
cpu: 2
memory: 512Mi
network:
overlay: my-network
ports:
- containerPort: 8080
hostPort: 80
env:
- name: DATABASE_URL
valueFrom:
secretRef: db-credentialsTry It Now
Execute WebAssembly code directly in your browser. Click Run to see it in action.
Ready to Get Started?
Deploy your first container in minutes. Check out our documentation or try the interactive playground.