Using Virtual Machines to Improve Container Security with Rkt v0.8.0
1–10 of 12 posts
Re: Using Virtual Machines to Improve Container Security with Rkt v0.8.0
#2I also think it's worth mentioning that Intel® Clear Containers now supports Docker as well.
Re: Using Virtual Machines to Improve Container Security with Rkt v0.8.0
#3[deleted]
Re: Using Virtual Machines to Improve Container Security with Rkt v0.8.0
#4Disclaimer: I work for Kismatic.
It's exciting to see further investment in Intel® Clear Containers. At Kismatic, we have been fans (0) of Clear Containers since the beginning!
(0): https://kismatic.com/technical/quickstart-intel-clear-linux-...
Re: Using Virtual Machines to Improve Container Security with Rkt v0.8.0
#5I also think it's worth mentioning that Intel® Clear Containers now supports Docker as well.
Arjan van de Ven (from Intel) can share more context.
Re: Using Virtual Machines to Improve Container Security with Rkt v0.8.0
#6A good intro to clear containers here, it's really fascinating reading: http://lwn.net/Articles/644675/
Re: Using Virtual Machines to Improve Container Security with Rkt v0.8.0
#7I also think it's worth mentioning that Intel® Clear Containers now supports Docker as well.
Arjan van de Ven (from Intel) can share more context.
It's fantastic that you've reduced the startup and memory overhead to the point where it's almost negligible. That's quite an achievement!
One thing that was not discussed is the impact hypervisor-based virtualization has on runtime. I've seen plenty of benchmarks where AWS EC2 instances perform much more poorly than a bare-metal machine with a similar processor. Do you have any idea what the overhead might be for clear containers vs standard linux namespace-based containers?
Re: Using Virtual Machines to Improve Container Security with Rkt v0.8.0
#8This might be viewed as slightly OT but this entire container security thing always reminds me how important it is to build on the right ecosystem.
This technology has been available for years on other platforms in a stable fashion. The fact that they never get used for different reasons is always sobering
Re: Using Virtual Machines to Improve Container Security with Rkt v0.8.0
#9Earlier quoted context omitted.
Arjan van de Ven (from Intel) can share more context.
It's fantastic that you've reduced the startup and memory overhead to the point where it's almost negligible. That's quite an achievement! One thing that was not discussed is the impact hypervisor-based virtualization has on runtime. I've seen plenty of benchmarks where AWS EC2 instances perform much more poorly than a bare-metal machine with a similar processor. Do you have any idea what the overhead might be for cl…
It's probably similar to our results from last year: http://domino.research.ibm.com/library/cyberdig.nsf/papers/0...
Re: Using Virtual Machines to Improve Container Security with Rkt v0.8.0
#10I also think it's worth mentioning that Intel® Clear Containers now supports Docker as well.
Where is this documented?