• Kernel: Linux 6.12.4-generic (cgroup v2)
• Shim: containerd.wasmedge.v1
• Architecture: x86_64 & AArch64
Docker 28.0 Released: Native WasmEdge Execution Without Virtualization
Docker 28.0 integrates the WasmEdge runtimeA high-performance WebAssembly virtual machine optimized for serverless microservices and edge compute with POSIX/WASI compliance. directly into containerd v2. Edge microservices now cold-boot in 12 milliseconds without spinning up a Linux kernel, cgroups, or virtual rootfs.
Before Docker 28.0, running even a 10-line Python or Go HTTP handler in Docker required bundling a minimal Linux distribution (Alpine, Debian), spinning up namespace jails, and allocating dedicated kernel page tables.
With native WasmEdge, Docker treats the compiled WASM binary like a standalone machine-code executable that runs in a tight, memory-safe sandbox directly on the host CPU.
02. containerd v2 Shim vs Linux Namespaces
The critical breakthrough in Docker 28.0 is the complete elimination of overlayfs layersA union mount filesystem that combines multiple directories into a single unified root filesystem, creating significant disk I/O overhead during container boot. for WASI targets. In standard container architecture, containerd must initialize union mounts, configure network bridge interfaces, and mount procfs.