3 ms·
This is a genuine concern. But this sounds a bit independent of the execution environment. It could either be containers or VMs.
by debarshri 8mo ago
This is a genuine concern. But this sounds a bit independent of the execution environment. It could either be containers or VMs.
- tptacek 8mo agoOn a local machine, yeah, I think it's pretty situational. VMs are safer, but in risk management terms the win is sometimes not that significant. In a multitenant cloud environment, of course, totally different story.
- DeborahEmeni_ 8mo agoI’ve been experimenting with this recently. Running services inside microVMs instead of plain containers makes the threat model easier to reason about, especially for multi-tenant or untrusted workloads. I’ve been trying it out on Northflank and the trade-offs become pretty obvious.