2 ms·
Same - I've been playing around with Unikernels for the same reason. Running my web server as the only process on the machine really appeals. Attack surface is
by marcus_holmes 3y ago
Same - I've been playing around with Unikernels for the same reason. Running my web server as the only process on the machine really appeals. Attack surface is tiny, basically non-existent. If the web server falls over, reboot the machine (which should be fast because it only has to load the kernel & the Go program).
It's basically the opposite of containers, which I like hehe.
- fuzztester 3y agoInteresting. Which unikernel do you use?
- marcus_holmes 3y agoI've been looking at a few. https://github.com/cloudius-systems/osv https://github.com/cloudius-systems/osv https://ops.city/ https://ops.city/ (also nanovms) - this is one that I actually got working to at least demo state
- fuzztester 3y agoInteresting, and thanks. I didn't know about those. I kind of thought you may have used MirageOS, which I had read about earlier. It is done in OCaml. https://mirage.io/ https://mirage.io/
- marcus_holmes 3y agoThat's fascinating, thanks for the link. But I'm coding in Go, and it looks like (from skimming the docs) that MirageOS only works with OCaml. I'll have to look further.
- fuzztester 3y agoWelcome. Yes, IIRC it is written in and only works with OCaml.