4 ms·
this is cool. throwing firecracker at CI is something i've been thinking about since i first read about firecracker. i was thinking more along the lines of, ca
by a-dub 4y ago
this is cool. throwing firecracker at CI is something i've been thinking about since i first read about firecracker.
i was thinking more along the lines of, can you checkpoint a bunch of common initialization and startup and then massively parallelize?
- alexellisuk 4y agoYou can checkpoint and restore, but only once for security reasons, so it doesn't help much. https://github.com/firecracker-microvm/firecracker/blob/main/docs/snapshotting/snapshot-support.md#snapshot-security-and-uniqueness https://github.com/firecracker-microvm/firecracker/blob/main... The VMs launch super quick in < 1s they are actually running a job.
- a-dub 4y agohm. well assuming they have no network and don't otherwise encrypt bits that an attacker could get ahold of, it's probably fine. the bigger issue would be something like spawning a bunch of servers that share the same rng state that can then be manipulated by an attacker (and therefore encrypt different data with the same key+nonce and such).