3 ms·
This is a limitation of whatever virtualized instance you're running on, not Firecracker itself. Firecracker depends on KVM, and AWS EC2 virtualized instances d
by gamegoblin 4y ago
This is a limitation of whatever virtualized instance you're running on, not Firecracker itself. Firecracker depends on KVM, and AWS EC2 virtualized instances don't enable KVM. But not all virtualized instance services disable KVM.
Obviously, Firecracker being developed by AWS and AWS disabling KVM is not ideal :)
Google Cloud, for instance, allows nested virtualization, IIRC.
- verdverm 4y agoIve used GCP nested virtualization. You pay for that overhead in performance so I wouldn't recommend it without more investigation. We were trying to simulate using luks and the physical is key insert / removal. Would have used it more if we could get GPU passthrough working
- shepherdjerred 4y agoAzure and Digital Ocean allowed nested virt as well!
- gavinray 4y agoYeah but imagine trying to convince people to use an OSS tool where the catch is that you have to deploy it on special instances, only on providers that support nested virtualization Not a great DX, haha I wound up using GraalVM's "Polyglot" abilities alongside it's WASM stuff
- Sirened 4y agoeh, I think most of the reason we don't see NV support on most public cloud instances is that nobody has come up with a compelling OSS tool that needs it. afaik most providers disable it because they want to discourage you from subletting their instances lol.