My VM is lighter (and safer) than your container (2017)
1–10 of 184 posts
Re: My VM is lighter (and safer) than your container (2017)
#2(2017)
Re: My VM is lighter (and safer) than your container (2017)
#3Integrate that with kubernetes and I'm sold.
Re: My VM is lighter (and safer) than your container (2017)
#4From 2017, before rootless containers caught on I think. The conclusions on safety might be due for
re-evaluating.
Re: My VM is lighter (and safer) than your container (2017)
#5Should be tagged with [2017]
Re: My VM is lighter (and safer) than your container (2017)
#6Integrate that with kubernetes and I'm sold.
What, like https://firecracker-microvm.github.io/ ?
Re: My VM is lighter (and safer) than your container (2017)
#7Integrate that with kubernetes and I'm sold.
What, like https://firecracker-microvm.github.io/ ?
I think it's from the AWS team, they made firecracker (micro VM)
So it does exist.
Funnily that's what fly does: take your container uncompress it to a full micro VM and run it on their infra
Re: My VM is lighter (and safer) than your container (2017)
#8Earlier quoted context omitted.
What, like https://firecracker-microvm.github.io/ ?
I think it's from the AWS team, they made firecracker (micro VM) So it does exist. Funnily that's what fly does: take your container uncompress it to a full micro VM and run it on their infra
[deleted]
Re: My VM is lighter (and safer) than your container (2017)
#9I think containers are often misunderstood: The main benefit is not isolation and security, it's defined and reproducible environments and builds.
If there is some additional isolation required, just run the container in a VM.
Re: My VM is lighter (and safer) than your container (2017)
#10Integrate that with kubernetes and I'm sold.
There are NVidia's Kata containers: https://docs.nvidia.com/datacenter/cloud-native/gpu-operator... . I'm not sure you need the physical GPUs to run them though. Most likely not.
I'm wondering though what value will Kubernetes add beside integrating with existing (presumably Kubernetes-based) infrastructure? At least, this is my understanding of the rationale for Kata containers. Other than that, it seems like it'd be just getting in the way...