perbu

21 ms·

211.
by perbu 8y ago
No commits since April. I think Antti has left the project and started a brewery or something.
212.
by perbu 8y ago
No, we didn't see you there. :-) It was a more of a workshop in relation to ICS2018.
213.
by perbu 8y ago
The value lies in security in this context. You also get a bit of performance as the "unikernels" are self-contained. So you can do most things, including the IP stack without switching into kernel mode. I'm guessing this is
214.
by perbu 8y ago
Cantrill is a smart guy. But he has always had a big mouth. And the fact is his post was written with ZERO experience with Unikernels. Zero. He was just assuming they act the way he imagined and attacked that image. Which is fine if you&#x2
215.
by perbu 8y ago
Sure. As long as you disable init on the server you'll have a unikernel setup. Round hole, square peg, though. Linux isn't meant to work like that.
216.
by perbu 8y ago
I believe it comes down to your programing language preference. If you are into OCaml the Mirage Unikernel is rather complete. If C or C++ is your thing there is IncludeOS (potentially adding other language runtimes next year) and for Haske
217.
by perbu 8y ago
I'm not saying multiple processes are a hack, just relying on fork/exec to clean up memory. Safeguarding against memory fragmentation is imho a solved problem - or at least solvable if you apply known methods. Other than that I th
218.
by perbu 8y ago
It sounds like you'd like Intel SGX. However, it seems Intel botched the implementation and their SGX VMs are leaking data through a number of attack vectors.
219.
by perbu 8y ago
fork() requires support for multiple processes. IncludeOS only has one process, so a fork() doesn't make sense there. Also, I should point out that relying on fork/exec to clean up long running processes sound like something of a
220.
by perbu 8y ago
You'd need a small and efficient hypervisor. Ukvm and Solo5 provides such a system and if I remember correctly IncludeOS can boot and shutdown in less than 10ms on those systems. So yeah, it would be interesting to see this on a server
221.
by perbu 8y ago
IncludeOS can support most of POSIX. It uses Musl, which provides a full POSIX implementation for the system calls that are implemented. Obviously things like fork() won't work.
222.
by perbu 8y ago
FWIW the most interesting tidbit I've learned after working with IncludeOS for couple of years is this; The operating system cannot reconfigure itself. All Unix and Windows-derived systems are meant to have the ability to reconfigure t
223.
by perbu 8y ago
Lua and Micropython have been ported - mostly as PoC. I expect us to do some proper ports next years, likely Node and Python. C support is OK, but it should be fairly simple to expand it as MUSL provides IncludeOS with the relevant bits of
224.
by perbu 8y ago
Unikernels are processes but with decent isolation. Also the abstractions are on a lower lever. If you have a process with user space networking and user space disk IO you’re one step away from a unikernel.
225.
by perbu 8y ago
Why are unikernels always compared to containers? Unikernels are obviously not meant to solve generic compute needs. They are per definition niche systems that do single, simple tasks. There is a lot of stuff that isn't done in contain
226.
by perbu 8y ago
Yes. We have production deployments of IncludeOS. The use case was network functions like firewalls and load balancers. I think the perception of Unikernels as something that is suppose to replace containers is a bit artificial. They have a
227.
by perbu 8y ago
I've heard this quite a few times. There is really nothing fundamental in keeping you from having the same or better observability in a Unikernel as opposed to a traditional POSIX kernel. A couple of examples. The Gnu Debugger (gdb) su
228.
by perbu 8y ago
An important thing to take into consideration here is that both Beyonce and Kanye West own significant amounts of stock in Tidal. So there is a conflict of interest here. Tidal has marketed itself as the streaming service that first and for
229.
by perbu 8y ago
Cilium performs better because the instruction cache is kept well as opposed to netfilter, which needs to gather data from all over in order to do it's job which leads to low cache utilization. Kernel code doesn't run faster than
230.
by perbu 9y ago
While it might not make sense for the grid there are other applications as well - like nuclear subs, battle cruisers and carriers.
231.
by perbu 9y ago
Mike says in his talk that LLVM started out with the goal of having an intermediate representation to run optimizations on. Hasn't this always been the case with compilers in recent times? I seem to recall similar things being said abo
232.
Getting OCaml running on the ESP32(toao.com)
3 points by perbu 9y ago|0 comments
233.
by perbu 9y ago
One thing I learned when working with Varnish Cache, which I did for a number of years, is that one should interact with the kernel as little as possible. PHKs obsession with using as few system calls as possible meant we couldn't do s
234.
by perbu 9y ago
Observed polar bear populations are not declining. However, since there is far less ice the polar bear are much easier to find these days, making the counts go up, rather than down. This has been the case in Svalbard, at least.
235.
by perbu 9y ago
I assume this is blatant speculation. Do you have any data or any other indication that indicates that venture funds are putting money into Bitcoin? Or if the investors in the funds are pouring money into bitcoin.
236.
by perbu 9y ago
Electricity is certainly physical. It can, after all, kill you.
237.
by perbu 9y ago
Safari doesn't grok the video on my setup. Firefox does.
238.
by perbu 9y ago
They will shut down the whole computer.
239.
by perbu 9y ago
The only times I've heard of destroying hardware with software have been: 1) stopping the ray in a CRT monitor through special purpose registers and using it to burn through the phosphorous. 2) Early floppy drives where you could po
240.
by perbu 9y ago
I've just started using vagrant with vmware fusion. Whilst not cheap the fans on my computer are much happier these days.

More ›