eyberg

17 ms·

151.
by eyberg 3y ago
So Nanos can run quite a few databases today and you should get the same sort of experience that running a database on any vm will produce (that is everything running in the cloud). You are absolutely correct though that most filesystems in
152.
by eyberg 3y ago
From my POV security and this particular implementation uses threads so automatically gets bonus points imo when dealing with the problems associated and discussed on the linked mailing list thread wrt large memory. However, from a much mor
153.
by eyberg 3y ago
FYI, erlang && elixir workloads can run on Nanos: https://github.com/nanovms/ops-examples/tree/master/elixir . I do understand what you are asking for though. There used to be an older project ca
154.
by eyberg 3y ago
So my opinion, having worked in the space for years and the author of this post, is that the vast majority of people (engineers included) underestimate the sheer amount of work building a kernel that can run lots of applications on various
155.
by eyberg 3y ago
If you think I was throwing rocks that most definitely was not the intention. The whole point of writing the post was to point out all the abstractions that don't quite gel well in unikernel land. The LD_PRELOAD wasn't used for th
156.
Running Postgres as a Unikernel(nanovms.com)
90 points by eyberg 3y ago|67 comments
157.
by eyberg 3y ago
Translating x86 -> arm or vice-versa is always going to be slow. No amount of software will ever overcome that. If you are using arm you really need to embrace it. Running x86 on arm is only a hack - whether it's apple or some rando
158.
by eyberg 4y ago
Does it become harder or easier? #include <stdio.h> #include <string.h> int bad(char* src) { int admin = 0; char buf[2]; strcpy(buf, src); printf("%d\n", admin); return admin; } int
159.
by eyberg 4y ago
Like this one? #include <stdio.h> #include <stdlib.h> int main() { char *s = "world"; s[0] = 'o'; s[1] = 'w'; s[2] = 'n'; s[3] = 'e'; s[4] = &#x
160.
Applying Sandbox Security to Node.js Unikernels with OpenBSD Pledge and Unveil(nanovms.com)
3 points by eyberg 4y ago|0 comments
161.
by eyberg 4y ago
That's looking from the outside in but consider looking at it from the end-user (read: attacker's) viewpoint. The lack of memory protections that wasm currently has such as the lack of read-only memory or memory randomizations or
162.
by eyberg 4y ago
The problem is that the wasm-on-the-server-side people don't seem to understand that the browser vendors will never ever let them have the laundry list of features that are necessary to fulfill Solomon's quoted tweet. The sooner t
163.
Dropping Packets from Unikernels(nanovms.com)
2 points by eyberg 4y ago|0 comments
164.
by eyberg 4y ago
Here is a recent (a little over one month ago) discussion https://oxide-and-friends.transistor.fm/episodes/revisiting-... from the same - kinda funny if you listen to it. :) Also unikernels appear in Brendan's pre
165.
Accessing the host filesystem from a Nanos guest using 9P(nanovms.com)
2 points by eyberg 4y ago|0 comments
166.
It’s 2023, is it time for unikernels on ARM yet?(medium.com)
1 points by eyberg 4y ago|0 comments
167.
Console Drivers to Stream to GCP Logging and AWS CloudWatch(nanovms.com)
2 points by eyberg 4y ago|0 comments
168.
by eyberg 4y ago
I work with NanoVMs and nanos.org can work under both qemu (by default) and deploy to hyper-v under WSL2. Also, nanos.org itself is a go unikernel so we have excellent go support. Also, from parent comment, ops, can deploy to esxi/vs
169.
by eyberg 4y ago
It most definitely is. :)
170.
by eyberg 4y ago
My own personal opinion is that a lot of the earlier projects were fixated on performance at all costs (even when the numbers didn't prove so - always run your own benchmarks) with the heavy downside that you would need to have custom
171.
by eyberg 4y ago
Generally speaking multi-tasking includes both multi-processing and multi-threading. Many unikernel projects support multi-threading so languages like Go/Rust can work very very well when deployed as unikernels. As for scripting langua
172.
by eyberg 4y ago
I work at NanoVMs. We don't actually do hosting. What we've found in the past is most organizations are very wedded to their existing infrastructure (AWS/GCP/Azure, etc.) so you can deploy Nanos to any cloud. I suppose
173.
GPU-Accelerated Computing with Nanos Unikernels(nanovms.com)
2 points by eyberg 4y ago|0 comments
174.
by eyberg 4y ago
This is one of the things FrankenPHP is dealing with (w/out fork). The big 'gotcha' here is that the heap is typically shared amongst threads in a process and that's where globals tend to live. However, you could make a
175.
by eyberg 4y ago
Firecracker trades run-time performance in favor of faster boot-time latency. It is something that is being addressed but afaik still exists. This of course doesn't mean anything if you want firecracker to boot a multi-gig JVM installa
176.
by eyberg 4y ago
For a kernel<>user yes, however you don't do the TLB flush for every type of switch. For instance thread<>thread you wouldn't and if you are single process there is no process<>process switch which is very expens
177.
by eyberg 4y ago
Definitely aware of the advantages but from our perspective and end-user use-cases being able to flip the U/S or R/w bits allows an attacker to overwrite the memory in question in which they can supply their own code.
178.
by eyberg 4y ago
We separate user/kernel because if you don't it is trivial to change the page permissions of anything and that's game over. It is important to note that different context switches have different costs some of which we have re
179.
Cross Region Unikernels at the Edge(nanovms.com)
21 points by eyberg 4y ago|7 comments
180.
by eyberg 4y ago
You are probably talking about this: https://research.nccgroup.com/wp-content/uploads/2020/07/ncc... In short - not a fundamental limitation - just that kernels (even if they are small) have a ton of wor

More ›