3 ms·
Do we have more hardware isolation? There was a pretty strong argument against microkernels - a driver running in userspace can still bork the whole machine if
by praptak 3y ago
Do we have more hardware isolation? There was a pretty strong argument against microkernels - a driver running in userspace can still bork the whole machine if the hardware being controlled can write to memory at arbitrary addresses.
- j16sdiz 3y agowe have more hardware isolation. they are seldom implemented correctly on firmware/mainboard level.
- bonzini 3y agoYes, there's IOMMUs. On the other hand, datacenters have become so large that a 1% performance improvement can amount to millions of dollars in hardware and energy savings, so the extra cost of a microkernel might not be very welcome outside consumer devices.
- effie 3y agoWe did not yet have a big publicized hack of whole cloud infrastructure causing massive economic harm. When that happens (the buggy PC/Linux architecture running the world is ripe), more secure architectures will become commercially interesting despite the 1% performance penalty.
- pjmlp 3y agoHardly of value with kubernetes everywhere running on top of type 1 hypervisors. Microkernels have won, even if monolitich kernel advocates haven't yet got the message.