2 ms·
gVisor can use KVM for isolation instead of ptrace, and I would guess that Google is using it.
by lima 8y ago
gVisor can use KVM for isolation instead of ptrace, and I would guess that Google is using it.
- sayhello 8y agoCorrect. We do not use ptrace in production.
- _wmd 8y agoThanks for clarifying.. it sounds thoroughly tragic, and the kind of endemic overengineering that made so many people (myself included) run screaming from the original App Engine over the years. I guess GCP really turned a page in Google culture and learned to finally listen to customers AWS> we put your code in a container, like everyone else puts your code in a container. We bikeshedded the Linux distro a bit, so you might need to recompile Customer> OK. Fine GCP> our web scale open source userland kernel hypervisor written in Go hosts your code in a Linux-but-not-quite-Linux microservice Customer> Why does <X> system call return a strange error code? GCP> You're too dumb to understand. Trust us Customer> oh, I think I understand well enough. Calls back Azure sales rep