3 ms·
I've heard a few times that Google's containers actually run inside of VMs. I'm curious if anyone knows what their VM implementation is or what its based on?
by bogomipz 8y ago
I've heard a few times that Google's containers actually run inside of VMs. I'm curious if anyone knows what their VM implementation is or what its based on?
- rrdharan 8y agoMostly upstream KVM with a custom replacement for QEMU: https://cloudplatform.googleblog.com/2017/01/7-ways-we-harden-our-KVM-hypervisor-at-Google-Cloud-security-in-plaintext.html https://cloudplatform.googleblog.com/2017/01/7-ways-we-harde...
- jsolson 8y agoLots of bits of KVM turned off, though. Makes it really interesting when I work with people on Open Source stuff. I find out all sorts of things KVM can apparently do that mostly leave me going "you put WHAT in host ring zero?!" :) (note: as implied, I work on our userland QEMU replacement)
- rrdharan 8y agoAlso, most running containers don't also run inside full blown VMs per se, but there are multiple layers of security/sandbox technologies involved.
- puzzle 8y agoMaybe you read the opposite, i.e. that GCP's KVM virtual machines run inside Borg containers?