3 ms·
Yes, this is an ordinary Linux binary. The attack surface is different, you may be interested in https://archive.fosdem.org/2019/schedule/event/solo5_unikernel
by hannesm 5y ago
Yes, this is an ordinary Linux binary.
The attack surface is different, you may be interested in https://archive.fosdem.org/2019/schedule/event/solo5_unikernels/attachments/paper/3283/export/events/attachments/solo5_unikernels/paper/3283/p199_Williams.pdf https://archive.fosdem.org/2019/schedule/event/solo5_unikern... and/or https://archive.fosdem.org/2019/schedule/event/solo5_unikernels/ https://archive.fosdem.org/2019/schedule/event/solo5_unikern... :)
TL;DR: hardware virtualization is pushing trust into hardware -- but can you trust the hardware implementation (to isolate memory)?