few questions: "how do get logs of everyone accessing the server?" "how do you debug the server itself when it fails?" "how do you audit the server if an attacker actually breaks in?" it seems to me that the app has to implement all that as with an exokernel, except, there's a single process running, yours To my understanding: compared to traditional vms, what you gain is speed and simplicity. compared to jails and c…
we debug server code in BEAM, Erlang on Xen is a deployment platform, if instance crashed we simply restart it.
intruder has very few chances to find breaking in beneficial - there's no shell inside which gives only minimal chances to snatch control, instance simply will crash. also, having of no OS leaves no holes to dig deeper
You're correct, it's exokernel-like approach.
We gain simplicity, much better resource consumption characteristrics, manageability at large scale and much better instance mobility. And, well, security.