eyberg

46 ms·

391.
by eyberg 7y ago
In the public cloud (aws/gce) we provision unikernels as vms themselves - that is there is no underlying linux instance. It's just the unikernel riding on top of the hypervisor (in the case of google that's kvm, for the t2s o
392.
by eyberg 7y ago
What do you think of what we are building @ https://github.com/nanovms/nanos ? We are all about taking things away from the general purpose operating system and only focusing on what is needed to run a given service in
393.
K8S Is Insecure [pdf](github.com)
2 points by eyberg 7y ago|0 comments
394.
by eyberg 7y ago
NanoVMs | SF | Kernel Engineering | Fulltime | Onsite | https://nanovms.com NanoVMs is building out safer and faster systems from the ground up (as in operating systems). We're venture backed and have really large customers
395.
Nanos Is Now Open Source(github.com)
3 points by eyberg 7y ago|0 comments
396.
by eyberg 7y ago
This is brought up quite a lot and isn't answered correctly enough in my opinion. The problem with this approach is that you can make it as small as you want but it's still Linux. At a certain point are you going to start patching
397.
by eyberg 7y ago
It's worth noting that Linux itself is written in C (not rust).
398.
by eyberg 7y ago
We literally just talked about this in a video done yesterday for application security weekly - https://www.youtube.com/watch?v=Hob1iLjIgWE - I previously wrote my thoughts on it here as well: https://nanovms.com
399.
by eyberg 7y ago
Just to point out for the first article (unikernels are undebuggable) - there's been a lot of work done in the past few years that effectively completely nullifies that argument: https://nanovms.com/blog/common-uni
400.
by eyberg 7y ago
The main reason I've found is that very few people/organizations have focused on making it a first class citizen. A weekend hacker or two might work for a new web framework but unikernels involve entire operating system developmen
401.
InfluxDB Unikernels on Google Cloud(nanovms.com)
2 points by eyberg 7y ago|0 comments
402.
US Customs and Border Patrol Facial Recognition Database Hacked(threatpost.com)
5 points by eyberg 7y ago|0 comments
403.
Kubelet Runs as Root Upon Restart(github.com)
1 points by eyberg 7y ago|0 comments
404.
Unikernels from the Edge to the Cloud(nanovms.com)
1 points by eyberg 7y ago|0 comments
405.
Docker is vulnerable to a symlink-race attack(seclists.org)
203 points by eyberg 7y ago|79 comments
406.
by eyberg 7y ago
have you seen https://ops.city ? - moreso - there are quite a few unikernel projects out there now
407.
Assessing Unikernel Security(nanovms.com)
1 points by eyberg 8y ago|0 comments
408.
by eyberg 8y ago
NanoVMs | Kernel Engineer | SF, CA | https://nanovms.com Looking for experienced kernel engineers with great debugging skills. We prefer on-site/full-time roles but are open to contract/remote positions for qualified i
409.
Running Forth Unikernels(nanovms.com)
103 points by eyberg 8y ago|49 comments
410.
Running WASM Unikernels(nanovms.com)
5 points by eyberg 8y ago|0 comments
411.
Ulrich Drepper (Libc) Is Now a Unikernel Developer(youtube.com)
2 points by eyberg 8y ago|0 comments
412.
by eyberg 8y ago
NanoVMs | Kernel Engineer | SF, CA | Remote/Onsite | Full-time/Contractor | https://nanovms.com We're looking for kernel engineers. You don't need prior professional experience although you should have defini
413.
by eyberg 8y ago
NanoVMs | SF, CA | FullTime | Onsite | C Kernel Engineer We're constantly looking for more qualified full-time on-site kernel engineers. For this particular role it's all C with a smattering of asm. Linux was obsolete the day it w
414.
Kubernetes Security Hole(zdnet.com)
2 points by eyberg 8y ago|0 comments
415.
by eyberg 8y ago
NanoVMs ( https://nanovms.com ) | Kernel Engineer, et. al | Full-Time | On-Site | San Francisco, CA NanoVMs is re-building the operating system for the 2020s. We work with unikernels and a few other interesting toys. Joining our t
416.
Common Unikernel Debugging Myths Debunked(nanovms.com)
1 points by eyberg 8y ago|0 comments
417.
by eyberg 8y ago
the big idea is that most companies are heavily virtualized - if you are using aws/gce you most definitely are and many private datacenters are as well - I'm not going to speak for ukl in particular but in general unikernels are
418.
by eyberg 8y ago
htop and such don't make sense inside a single process system; logging usually gets sent to remote syslog/elk/etc. many apm solutions work out of the box one of the biggest misconceptions about unikernels is that they are som
419.
by eyberg 8y ago
all unikernel implementations I'm familiar with are single process by nature and thus the protection that you need on a multiple process system such as linux is completely un-necessary, especially since they are always deployed as vms
420.
by eyberg 8y ago
NanoVMs | Kernel Engineer, Sales Engineer, many more | SF, CA | Onsite | Full Time We're building out unikernel based infrastructure. You don't have to read Hotcloud or OSDI papers to know that this is what the future of software

More ›