3 ms·
Lambda uses a stripped down Linux kernel (afaik it has some syscalls removed) The kernel surface is part of their security model. There's some details here htt
by nijave 5y ago
Lambda uses a stripped down Linux kernel (afaik it has some syscalls removed)
The kernel surface is part of their security model. There's some details here https://www.bschaatsbergen.com/behind-the-scenes-lambda https://www.bschaatsbergen.com/behind-the-scenes-lambda
E.g. exposing the kernel would undo some intentional isolation
- JoshTriplett 5y agoI've seen that, but I wonder to what extent they've done custom work and to what extent they've just used established Kconfig options to compile out surface area they're not using. In any case, Firecracker+Nitro seem like they'd be a sufficient security boundary.