4 ms·
Or put it in a microvm using eg smolmachines.
by chrisweekly 5mo ago
Or put it in a microvm using eg smolmachines.
- causal 5mo agoI've never used smolmachines but I'm curious; why this over a container?
- apitman 5mo agoContainers are not security boundaries. Vulnerabilities in containers are much more common than in VMs.
- chrisweekly 5mo agoKernel-level isolation is a significant security differentiator, for starters. https://github.com/smol-machines/smolvm#comparison https://github.com/smol-machines/smolvm#comparison shows a good comparison table.
- bionade24 5mo agoUsing runsc instead of runsc means that there's a hypervisor layer (gvisor, probably) in-between the kernel and the container userland