3 ms·
In the way that unikernels are typically used, each unikernel instance runs as a VM, and security is implemented by the hypervisor. If the VM is just running on
by mwcampbell 11y ago
In the way that unikernels are typically used, each unikernel instance runs as a VM, and security is implemented by the hypervisor. If the VM is just running one application, it doesn't need its own mechanism for allowing mutually distrusting users to run their own code.
- dap 11y agoIf the hypervisor is providing the security, I don't see how the unikernel can be said to be any more secure than anything else run under a hypervisor. Moreover, I don't see why the hypervisor should be in a better position to be secure than a kernel.