4 ms·
Mostly upstream KVM with a custom replacement for QEMU: https://cloudplatform.googleblog.com/2017/01/7-ways-we-harden-our-KVM-hypervisor-at-Google-Cloud-securi
by rrdharan 8y ago
Mostly upstream KVM with a custom replacement for QEMU:
https://cloudplatform.googleblog.com/2017/01/7-ways-we-harden-our-KVM-hypervisor-at-Google-Cloud-security-in-plaintext.html https://cloudplatform.googleblog.com/2017/01/7-ways-we-harde...
- jsolson 8y agoLots of bits of KVM turned off, though. Makes it really interesting when I work with people on Open Source stuff. I find out all sorts of things KVM can apparently do that mostly leave me going "you put WHAT in host ring zero?!" :) (note: as implied, I work on our userland QEMU replacement)