eyberg

40 ms·

361.
by eyberg 7y ago
Nope, no linux. https://github.com/nanovms/nanos is a new kernel designed to run a single (linux) application as a virtual machine.
362.
by eyberg 7y ago
That it can recover by itself. It's a bit more than just 'auto-restart' (as mentioned in the article) since it's an entire vm that is restarting versus a process and it's not the same as restarting a linux vm.
363.
Autonomous Rust Unikernels in Google Cloud(nanovms.com)
121 points by eyberg 7y ago|18 comments
364.
Kubernetes Performance Troublespots – Airbnb's Take(thenewstack.io)
1 points by eyberg 7y ago|0 comments
365.
N0r1sk – Unikernel(n0r1sk.com)
1 points by eyberg 7y ago|0 comments
366.
by eyberg 7y ago
5ms happens to be a special number. NEC reports booting unikernels that fast: http://cnp.neclab.eu/projects/lightvm/lightvm.pdf If you're doing NFV type of workloads fast boot time might be interesting if you
367.
by eyberg 7y ago
The observability/monitoring/debugability arguments are super old arguments that simply aren't true in today's (and most of yesterday's) unikernel world. Most of the current day observability tooling I see in use to
368.
by eyberg 7y ago
It does to a degree but there is immense confusion on how it does. For example with OPS https://ops.city (I'm associated with the project) we deploy directly to AWS or GCloud as an ami or cloud image not orchestrating qem
369.
by eyberg 7y ago
This is a common misunderstanding. There are many different types of context switching and you need the context (heh!) To compare apples to apples. Kernel to userland, thread to thread, process to process, kernel thread vs user thread, etc.
370.
by eyberg 7y ago
Most unikernels dont have the notion of users, groups, or multiple processes on purpose for security and performance reasons. Some unikernels use the best in class file systems available like zfs by default. Containers have all of these.
371.
by eyberg 7y ago
IBM/redhat have a few unikernel related projects going on and I'm guessing this is referring to nabla containers (or he might be aware of ukl). The only reason to stuff an unikernel into a container is to make the transition easie
372.
IBM CTO Sees Smaller Container Platforms Ahead(containerjournal.com)
70 points by eyberg 7y ago|64 comments
373.
by eyberg 7y ago
Most (all?) attackers dont care about apps. They want access to your server to do other things. That could be downloading a monero miner or doing something as simple as mysqldump. Either way that's another program which isn't poss
374.
by eyberg 7y ago
Not being able to spawn other processes is actually a huge security and performance benefit when you know you're deploying to a virtualized environment to begin with. (eg: cloud).
375.
by eyberg 7y ago
Ops is merely an orchestration tool to deploy these to google cloud and aws. The actual kernel is nanos and we decided against the recent trend of custom licenses to go with apache.
376.
by eyberg 7y ago
Little late here but yes nanos is Apache and found at https://github.com/nanovms/nanos . It also runs rust very well.
377.
by eyberg 7y ago
There is no need for containers in this architecture.
378.
by eyberg 7y ago
Nanos, https://ops.city has had rust support for a while now as does OSv. I'm involved with nanos/ops.
379.
by eyberg 7y ago
yep - and some of us are working on that
380.
by eyberg 7y ago
We turned on strace like functionality (ex: https://github.com/nanovms/nanos/issues/844 ) for Nanos a long time ago to figure out what to work on for various applications. Having said that it's not somet
381.
Shrink Wrap Your OS(tag-cyber.com)
1 points by eyberg 7y ago|0 comments
382.
Serverless Security with Unikernels(dev.to)
2 points by eyberg 7y ago|0 comments
383.
Stateful Serverless with Unikernels(dev.to)
1 points by eyberg 7y ago|0 comments
384.
Easiest Way to Deploy Serverless Unikernels(ops.city)
1 points by eyberg 7y ago|0 comments
385.
by eyberg 7y ago
I agree with the authors of https://www.microsoft.com/en-us/research/uploads/prod/2019/0... that we should not be teaching fork and friends to people anymore except out of historical context. Yes, t
386.
Deploying Nanos Node.js Unikernels to AWS(nanovms.com)
3 points by eyberg 7y ago|0 comments
387.
by eyberg 7y ago
I totally agree that if you care about security you should be running in the opposite direction of k8s. Google Cloud has this option (nested hypervisors) but not for security reasons - it's used to run other software that comes package
388.
by eyberg 7y ago
I don't know who you specifically work for but I've been to 2 different banking tech conferences in the past month. JPMorgan mentioned they have 13 (or was it 16?) wholly owned datacenters. BoA's tech summit was just this pas
389.
by eyberg 7y ago
Deploying a hypervisor on top of a hypervisor (eg: a public cloud) usually makes very little sense so I don't see that as a trend. However, outside of the valley bubble many large sectors of the economy do not use public clouds (such a
390.
CryptoJacking Worm Found on Docker Hub(unit42.paloaltonetworks.com)
2 points by eyberg 7y ago|0 comments

More ›