4 ms·

> I suspect it's use is mostly going to be in development environments and client-side uses of containers Containers don't need this. It's only useful for virt

• geofft 8y ago
  The envisioned use case is Kata Containers https://katacontainers.io https://katacontainers.io (formerly "Clear Containers"), which behaves like a container runtime but is actually a virtual machine with its own kernel to enhance isolation from the host. Since it runs its own kernel, it needs something like this to access files on the host. The advantage compared to running normal VMs is that it's interoperable with things that expect a container runtime like Docker or rkt - e.g., Kubernetes can run Kata Containers - and the overhead / density / startup speed is much closer to that of actual containers (in the sense of namespaces+cgroups) than traditional VMs.
  • ori_b 8y ago
    And the advantage compared to running containers is...?
    • littlekosh 8y ago
      > a virtual machine with its own kernel to enhance isolation from the host Whether that’s something you care about or think is necessary is left as an exercise to the reader (i.e. it depends).
• runyor 8y ago
  Too short text for that topic. Container world certainly needs a lot of storage problems resolved. So, why do containers not need this? What part of it do containers not need?
  • ori_b 8y ago
    Containers have no access to virtio, so they can't use this. It's that simple. Containers are not virtual machines.