4 ms·
Mandatory reference to mirage-os, a similar unikernel build on top of xen with a focus on security, in OCaml: https://mirage.io/ https://mirage.io/ I wish to
by rixed 3y ago
Mandatory reference to mirage-os, a similar unikernel build on top of xen with a focus on security, in OCaml:
https://mirage.io/ https://mirage.io/
I wish to encounter some unikernels in production sometime.
- pjmlp 3y agoI guess the main issue is that with Kubernetes, and chiseled containers we are quite close to the same idea, even if a full kernel might be underneath, and thus it is quite hard to gain adoption.
- ClumsyPilot 3y agoThis is the paradox of software as is today- we are good at adding crap on top, we are bad at replacing what’s underneath. Now, in cloud native we have decomposed applications - logging is now separate, so is storage, etc. I should be possible to change the stack underneath without anyone noticing, or at least with minimal disruption to operations.
- pjmlp 3y agoI joke that in the end Andrew Tanenbaum got the upper hand over Linus, because the supposed performance benefit of a monolithic kernel over microkernels is meaningless in a Kubernetes cluster, or distributions like SUSE Linux Enterprise Micro and Fedora CoreOS.
- convolvatron 3y agoI certainly don't speak for the nanos project, but in my mind this was a key reason for even doing this work. That we could write an adaption layer that would hoist the world as we know it off the sandpile and put it someplace else where things made more sense. its a shipping container, an adaption jig, an invitation to rethink the world underneath without insisting that anyone rewrite anything.
- packetlost 3y agoIn certain areas, the additional isolation that virtualization brings might be worth it, but in general I agree with this
- indymike 3y agoDone is the enemy of better.
- HL33tibCe7 3y agoPlus the fact mirage apps have to be written in OCaml