3 ms·
I really wish support for direct kernel boot was more robust. It's there, but there's very little infrastructure support (to get the proper images in the first
by creshal 2y ago
I really wish support for direct kernel boot was more robust. It's there, but there's very little infrastructure support (to get the proper images in the first place, to mass replace them for updates, etc.) and you have to handroll everything to get it working, even in something like ovirt.
- rwmj 2y agoI agree with this and we use direct kernel boot for libguestfs. The problem for confidential VMs / containers is the kernel must be inside the image and must be inaccessible to hypervisor (as that is the exact point of the thing), and direct kernel boot needs the kernel to be outside and accessible. The problem for oVirt and other management systems is that usually you want the kernel to be inside the VM so it gets updated when you update the VM, and again direct kernel boot means you've got to have a way to reach in and extract it (cough virt-get-kernel).