2 ms·

immutable means read-only; so if you repackage the OS to have virtualbox in the base image then it would work, theoretically. But why virtualbox over qemu+kvm?

by dijit 3y ago

immutable means read-only; so if you repackage the OS to have virtualbox in the base image then it would work, theoretically. But why virtualbox over qemu+kvm? KVM is baked into the kernel, is faster, is supported by vagrant (though not all public vagrant boxes) and has a much better track record of security (even now: Virtualbox disables ASLR).

yjftsjthsd-h 3y ago
> KVM is baked into the kernel, is faster, is supported by vagrant (though not all public vagrant boxes) and has a much better track record of security (even now: Virtualbox disables ASLR). Technically supported by Vagrant, but every time I tried it was really painful to try and actually use; it's not built-in, so you have to install the plugin which was awful, and then box support was really poor. (To be fair, I ended up dropping Vagrant rather than KVM)