2 ms·

Can you elaborate?

• Zambyte 3y ago
  The point of containers is to run a process in an isolated environment. Microkernels by design allow isolating any process with very fine grain control, by allowing or disallowing certain IPC connections for a given process. Those connections can be enabled or disabled for a running process as well, which would essentially be like moving a process in and out of a container while it is running. Individual processes can also run entirely isolated stacks for things like networking, storage, etc. in an unprivileged way. The former can be particularly painful to deal with in Linux containers. Containers are basically monolithic kernels playing catching to the features designed into microkernel-based operating systems.
• palata 3y ago
  I'd love to get more details, too. Sounds interesting!
  • FuriouslyAdrift 3y ago
    Probably referring to library operating systems and making a unikernel instead of a shared kernel container. https://www.sigarch.org/leave-your-os-at-home-the-rise-of-library-operating-systems/ https://www.sigarch.org/leave-your-os-at-home-the-rise-of-li...
  • FuriouslyAdrift 3y ago
    Another write up: https://phoenixnap.com/kb/unikernel-vs-container https://phoenixnap.com/kb/unikernel-vs-container