Live data from Hacker News

My VM is lighter (and safer) than your container (2017)

dl.acm.org

181–184 of 184 posts

Re: My VM is lighter (and safer) than your container (2017)

#181
post #96

Earlier quoted context omitted.

Maybe try out kraft.cloud: we take Dockerfiles as input and automatically convert to lightweight VMs/unikernels when deploying (disclaimer: I'm one of the paper's authors and one of the people behind KraftCloud).

I recently built a similar thing for learning purposes using firecracker + the firecracker go api. I wrote a small init system in rust and combined that with filesystem images derived from the Debian, Ubuntu etc. container images (that can be extended with more layers). What really surprised me the most, is how quick and simple it is to compile the linux kernel. Cloned a tag with --depth 1, configured it and then it…

> I had heard multiple stories of how long that's supposed to take but it really doesn't.

It used to, but that's why they are only stories now.

Re: My VM is lighter (and safer) than your container (2017)

#182

Earlier quoted context omitted.

That's exactly the summary of this. That said, it makes sense from a developer POV; if, during development, you don't need the isolation you can run multiple containers (with on paper fast boot times and minimal overhead) on your development box. There's plenty of cases to imagine where you need the containerization but not necessarily the isolation.

That what I do. I use https://github.com/jrz/container-shell so my projects are contained, and I'm a little bit protected against supply chain attacks

Why not use bubblelwrap or selinux or something? Docker is overkill for this.

Re: My VM is lighter (and safer) than your container (2017)

#183

Earlier quoted context omitted.

That what I do. I use https://github.com/jrz/container-shell so my projects are contained, and I'm a little bit protected against supply chain attacks

Why not use bubblelwrap or selinux or something? Docker is overkill for this.

Haven’t heard about bubblewrap, and I’m on my macOS. But I’ll look into it for inspiration

Re: My VM is lighter (and safer) than your container (2017)

#184

Earlier quoted context omitted.

Thanks for the suggestion, I was unaware of podman and will be trying it out because root has always bothered me.

Podman is fantastic! It can also handle kubernetes and generate systemd units for containers.

> generate systemd units for containers

Oh man that is something I've been wanting as well.

Post reply on HN