3 ms·

This seems like a great reason to virtualize everything possible.

• 0xCMP 12y ago
  True, but even this isn't always perfect. I was told recently that Xen shares the kernel memory space among VMs so if once is compromised at the kernel level all of them could be compromised. This person dislikes using Amazon for this reason because he can't be sure his box isn't popped through another VM.
  • deleted 12y ago
    [deleted]
  • DanielDent 12y ago
    Generally speaking, Xen-style virtualization is where each VM has their own copy of the kernel and their own memory space. There are new-ish features like transcendent memory which can blur the lines, but I don't think they are widely deployed. Systems like docker, LXC, and virtuozzo are where you run into the issue you describe.