eyberg

24 ms·

271.
by eyberg 6y ago
You use the native cloud facilities available by spinning up a new instance per deploy. Whether you need a simple shared thread (smallest instances available) or you want to tackle the 368 thread monsters available on something like GCloud
272.
by eyberg 6y ago
Yeh, I beg to differ. Containers have an absolutely horrible security record. Just in the past few weeks we've seen yet another container breakout, an "un-fixable" k8s 'issue', another cryptojacker exclusively attac
273.
by eyberg 6y ago
gVisor is pretty bad perf-wise: https://news.ycombinator.com/item?id=19924036 https://gvisor.dev/docs/architecture_guide/performance/ However, it does directly deal with container security is
274.
by eyberg 6y ago
How do you be careful? You can't trust the cloud provider: https://unit42.paloaltonetworks.com/windows-server-container... https://media-exp1.licdn.com/dms/image/C5622AQH70okwLkMlNg/f...
275.
by eyberg 6y ago
Seems more and more people are waking up to the fact that docker and k8s are broken by design: https://thenewstack.io/unfixable-kubernetes-security-hole-me...
276.
by eyberg 6y ago
You can use terraform to spin it up but a lot of that becomes un-necessary as that is assuming you are deploying a linux vm or something similar. Packer itself would be totally replaced with something like OPS - https://ops.cit
277.
by eyberg 6y ago
The native libraries just need to be included onto the fs. Every interpreted language out there is like this. Also, the gem install step can be done outside of the unikernel and then have the artifacts loaded on. We have current ESXi VSpher
278.
by eyberg 6y ago
* We do have paying customers yes. * Yes you can run ruby. Looks like we have packages for 2.3, 2.5 and 2.7 currently - it'd be trivial to add more runtimes.
279.
Working with Unikernel Volumes in Nanos(nanovms.com)
42 points by eyberg 6y ago|10 comments
280.
Debugging Nanos Unikernels with GDB and Ops(nanovms.com)
1 points by eyberg 6y ago|0 comments
281.
Investigators seize devices from Fountain Hills residence in voter data theft(azcentral.com)
1 points by eyberg 6y ago|0 comments
282.
by eyberg 6y ago
Considering many machines run windows I'm going to go with a resounding "no" wrt to "being secure", however saying something is 'insecure' is not the same thing as "this has been hacked". Most co
283.
by eyberg 6y ago
You might be interested in various unikernel approaches such as nanos/ops: https://nanos.org (I'm with the project). It doesn't run docker images but it sounds very much like what you are interested in doing - one
284.
Oakland Bans Natural Gas in New Residential and Commercial(sfchronicle.com)
5 points by eyberg 6y ago|0 comments
285.
LimeStone County Social Worker Charged with 134 Felony Counts Involving Elec(texasattorneygeneral.gov)
3 points by eyberg 6y ago|0 comments
286.
Feds charge 3rd Cincinnati councilman with corruption(lmtonline.com)
1 points by eyberg 6y ago|0 comments
287.
California Pair Charged with 41 Count Voter Fraud on Behalf of Homeless People(nbclosangeles.com)
35 points by eyberg 6y ago|13 comments
288.
by eyberg 6y ago
The Ozarks extend well into Missouri as well (also a few hours drive). Ozark the Netflix series even though filmed in Georgia? takes place ~4.5 hrs drive from Tulsa. Besides the forest it's known for all the rivers that people float do
289.
Using Virtio-FS on a Unikernel(qemu.org)
2 points by eyberg 6y ago|0 comments
290.
San Francisco Bans Natural Gas for All New Construction(sfgate.com)
11 points by eyberg 6y ago|18 comments
291.
SEC Now Allows Up to $5M for CF Offering(sec.gov)
1 points by eyberg 6y ago|0 comments
292.
by eyberg 6y ago
Generally speaking containers replicate networking && storage layers so are definitely much slower than a vm on public cloud, not to mention they generally live on vms. However, in this context (being on a rpi) it probably wouldn&#x
293.
by eyberg 6y ago
https://github.com/nanovms/ops-examples/tree/master/rust/01-... && https://github.com/nanovms/ops-examples/tree/master/java to get you started - i don&#x
294.
by eyberg 6y ago
We don't actually do any hosting. This is a very common misconception. OPS - https://ops.city can deploy to any public cloud and can run on openstack/kvm/vsphere as well.
295.
by eyberg 6y ago
We fully expect and are planning for multi-tenant applications on devices similar to a rpi4 looking at the future so I firmly agree that flashing the device isn't really desirable. As an example if you have image inferencing project yo
296.
by eyberg 6y ago
Nanos is specifically targeting ARM64 for the raspberry pi 4 and expect that support to land formally very soon. (I'm with the project).
297.
by eyberg 6y ago
NanoVMs | SF, NY, Remote (US) | Kernel Eng | Full Time NanoVMs is building out unikernel tooling and infrastructure. We have open source at https://github.com/nanovms/nanos && https://github.com&#x2F
298.
Sneaky Doki Linux malware infiltrates Docker cloud instances(bleepingcomputer.com)
1 points by eyberg 6y ago|0 comments
299.
by eyberg 6y ago
Sure - the hypervisor is the isolation vehicle - the same as firecracker. The only? reason I can see for wanting to deploy N unikernels to one AWS instance is if you want full control on the orchestration of things like multi-tenancy, howev
300.
by eyberg 6y ago
There's also unikernels which several work under firecracker. "The first, and really the big problem for the whole virtualization approach, is that you need bare metal servers to efficiently do lightweight virtualization;" &l

More ›