3 ms·
Correct TL;DR * High performence overhead and complexity of VM. * Hypervisor vulnerabilities. * Unikernel are small because the responsibilities are shifted
by meanduck 11y ago
Correct TL;DR
* High performence overhead and complexity of VM.
* Hypervisor vulnerabilities.
* Unikernel are small because the responsibilities are shifted to the process.
* "Unikernels are entirely undebuggable."
---
IMO process isolation (segmentation, paging etc) already gives 100% performence with most security. And since these are old and simpler hardware designs, hardware bugs are less likely to happen.