3 ms·
Containers (docker/podman) are still not as secure as virtualization (qemu,kvm,proxmox) Plus these might be smaller and might run faster than containers too.
by Imustaskforhelp 10mo ago
Containers (docker/podman) are still not as secure as virtualization (qemu,kvm,proxmox)
Plus these might be smaller and might run faster than containers too.
- m00dy 10mo agoyeah it's a fairy tale.
- throwaway894345 10mo agoSmaller than containers seems unlikely since a container doesn't have any kernel at all, while these microvms have to reproduce at least the amount of kernel they would otherwise need (e.g., a networking stack). I'm sure some will be inclined to compare an optimized microvm to an application binary slapped into an Ubuntu container image, but that's obviously apples/oranges. Faster might be possible without the context switching between kernel and app? And maybe additional opportunities for the compiler to optimize the entire thing (e.g., LTO)?
- justatdotin 10mo agocontainer can be smaller at rest, but larger at runtime if you're not sure which you want its probably container