4 ms·
Why wouldn’t you use a standard container based approach like Docker?
by thethimble 3y ago
Why wouldn’t you use a standard container based approach like Docker?
- candleknight 3y agoThe last time I tried, it was pretty slow to fire up, especially when I tried to run multiple submissions at once. It's also even more overkill for my use case; I currently use isolate (https://github.com/ioi/isolate https://github.com/ioi/isolate) which is just a wrapper around cgroups/namespaces, and it's been a lot faster. Sidenote: I'm not really looking to replace it, I was just asking out of curiosity since this is my first time hearing of unikernels
- j16sdiz 3y ago> I currently use isolate (https://github.com/ioi/isolate https://github.com/ioi/isolate) which is just a wrapper around cgroups/namespaces, and it's been a lot faster. Yes. This is the fastest you can get. If you want safer, add pr_set_seccomp _in addition_ to it. but that would be a custom solution.