Execute Docker Containers as QEMU MicroVMs
mergeboard.com
Execute Docker Containers as QEMU MicroVMs
1–10 of 66 posts
Re: Execute Docker Containers as QEMU MicroVMs
#2There are a few existing projects out there like this (running Docker images as virtual machines, specifically) if folks are interested. Slim [0] is the one I can remember off the top of my head. I think there are a couple more.
Still, neat to have the walkthrough here in this post.
Re: Execute Docker Containers as QEMU MicroVMs
#3Re: Execute Docker Containers as QEMU MicroVMs
#4[deleted]
Re: Execute Docker Containers as QEMU MicroVMs
#5A few years ago I invested in a small startup called `hyper.sh`. It open sourced a container runtime called `runV` which provided exactly this: security of virtual machines plus convenience of containers.
The project later merged with Intel Clear Container to become what's now called Kata Containers (https://katacontainers.io/) and is now widely used by several Internet giants like Alibaba and Baidu.
The startup was acquired by Ant Finance a couple of years ago.
(I recorded a podcast with one of hyper.sh engineer if you can listen to Mandarin https://pan.icu/25)
Re: Execute Docker Containers as QEMU MicroVMs
#6Isn't firecracker an AWS tech?
Re: Execute Docker Containers as QEMU MicroVMs
#7Isn't firecracker an AWS tech?
That’s correct.
Re: Execute Docker Containers as QEMU MicroVMs
#8Why not run containers in VMs in containers in VMs? :)
Seriously, VMs are hardly as secure as many people want to believe unless you're utilizing enclaves and even that has vulnerabilities. I think a better approach is Seccomp and whatever other filtering makes sense.
Re: Execute Docker Containers as QEMU MicroVMs
#9Why not run containers in VMs in containers in VMs? :) Seriously, VMs are hardly as secure as many people want to believe unless you're utilizing enclaves and even that has vulnerabilities. I think a better approach is Seccomp and whatever other filtering makes sense.
That's the approach taken by Google's gVisor (at the cost of I/O and network performance).
Re: Execute Docker Containers as QEMU MicroVMs
#10A few years ago I invested in a small startup called `hyper.sh`. It open sourced a container runtime called `runV` which provided exactly this: security of virtual machines plus convenience of containers. The project later merged with Intel Clear Container to become what's now called Kata Containers ( https://katacontainers.io/ ) and is now widely used by several Internet giants like Alibaba and Baidu. The startup wa…
Probably off topic: Back in 2014-15 at my first job, when I was working on openstack, they used to show up at the summits. They were super smart and very generous with their time when I had questions. I wondered sometime in 2020 what happened to them, I'm happy they had a decent exit.