> "But in any real Xen deployment I'm aware of, Linux is running in dom0 anyway." It's still separated from the the domUs via the hypervisor. So an exploit in

> "But in any real Xen deployment I'm aware of, Linux is running in dom0 anyway." It's still separated from the the domUs via the hypervisor. So an exploit in one place isn't easy to escalate into a breach of the whole system. This is a security benefit. From the rest of your comment, I get the impression that you care more for speed/convenience (even the post you link to is about speed). That's a perfectly reasonable position and the examples you provide are perfectly valid for different threat models (i.e. running your own trusted code on your own trusted server). Deployments to the cloud (or large scale teams) do need to consider different threat models. As avsm points out in a sibling comment, you can target numerous back-ends with MirageOS -- meaning that you can compose a system that suits your particular needs.