[CNCF LFX Proposal] urunc: Integration of urunc's sandbox execution with Argo

### CNCF Project

urunc

### Term

2026 Term 3 (Sep-Nov)

### Program Name

Integration of urunc's sandbox execution with Argo

### Program Description

## Description

While urunc has successfully enabled the use of unikernels and single application kernels within Kubernetes environments, its integration with other CNCF projects has been less seamless. A notable example is Argo, a widely adopted platform for defining and managing workflows, complex pipelines, and distributed applications on Kubernetes.

In urunc's execution model, untrusted components of a deployment run inside sandboxed environments as unikernels or single-application kernels, while trusted components run as standard containers. Although this separation enables fine-grained workload isolation, it introduces friction in deployments like Argo, since it breaks pod-level assumptions (e.g. shared networking, storage).

This project aims to bridge that gap between Argo deployments and urunc's sandboxed execution model by enabling compatibility at the runtime and workflow levels. The expected outcome is that users can easily choose which parts of their Argo deployment run in isolated urunc sandboxes.

## Expected Outcome:

- A document describing the architecture of Argo and the execution model of urunc, including a clear breakdown of the main incompatibilities.
- A working integration with the necessary changes required in urunc and its components.
- A tutorial showing how to deploy and run Argo workflows using urunc, including setup, configuration, and example use cases.

### Technologies

Go, container runtimes, Argo, Kubernetes

### Skills same as Technologies?

- [x] Yes, the required skills are the same as the technologies listed above.

### Required/Desirable Skills

_No response_

### Mentors

Charalampos Mainas | @cmainas | cmainas@nubificus.co.uk | cmainas
Anastassios Nanos | @ananos | ananos@nubificus.co.uk | ananos

### Upstream Issue URL

https://github.com/urunc-dev/urunc/issues/573

### Application Prerequisites

- [x] Resume
- [x] Cover Letter
- [ ] School Enrollment Verification
- [ ] Participation Permission from school or employer
- [ ] Coding Challenge
- [x] Custom Prerequisite (fill in details below)

### Coding Challenge URL

_No response_

### Custom Prerequisite Name

Issue replication

### Custom Prerequisite Description

Try to replicate the issue of deploying Argo workflows over urunc:
- Write down the steps you followed in order to reproduce it.
- Include a small text describing what went wrong and just in **one** paragraph how it could be fixed.

### Custom Prerequisite — File Upload

- [x] Yes — completion of this task requires the mentee to submit a file.

---
**LFX program:** [CNCF - urunc: Integration of urunc's sandbox execution with Argo (2026 Term 3)](https://mentorship.lfx.linuxfoundation.org/project/3581574f-5f52-40c7-9a3b-b1dc019949d7)

Start with the upstream issue at https://github.com/urunc-dev/urunc/issues/573 and reproduce deploying Argo workflows over urunc as described in the custom prerequisite. Record the reproduction steps and incompatibilities, then define completion as an architecture document, a working urunc-Argo integration, and a tutorial covering setup, configuration, and examples.

Written by the indexing model from the issue text.