microvm
Infrastructure
virtual machine monitor
SHOW HN2019
How HN took it
1 positive, 5 neutral or asking, 1 mixed, 1 critical, out of 8 comments about the project. Thread score +0.02.
Docs: 1 for, 0 againstPrivacy: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Documentation includes precise, fully worked example commands
From 1 comment
Oh, nice: props for including precise, fully worked example commands to actually use this. This is so helpful in terms of onboarding and being able to actually get people to use…
yjftsjthsd-h on HN
QEMU has a pretty good security record in the maker's view, with supporting data from KVM Forum talk
From 1 comment
I think the slide 14 from the talk "Reports of my Bloat Have Been Greatly Exaggerated" [1] presented by Paolo Bonzini at KVM Forum 2019 gives some good perspective about QEMU's…
slpnix on HN
Objections
QEMU has a long track record of security bugs
From 1 comment
> QEMU... has a pretty good security record That's an interesting and I would argue, contrarian take?…
rrdharan on HN
QEMU is a kitchen-sink design with a large attack surface
From 1 comment
> "Of the top 100 vulnerabilities reported for QEMU: > - 65 were not guest exploitable > [...] Which leaves about 30 that presumably were guest exploitable. Don't get me wrong --…
mato on HN
Requests
Build a QEMU binary that only supports microvm devices
From 1 comment
> "Of the top 100 vulnerabilities reported for QEMU: > - 65 were not guest exploitable > [...] Which leaves about 30 that presumably were guest exploitable. Don't get me wrong --…
mato on HN
Questions
Does TCG support make it easier to develop with in some environments?
From 1 comment
Firecracker requires KVM, but QEMU can be used with instruction emulation, correct? Does that make this potentially a little easier to develop with in certain environments?
maxmcd on HN
What are the differences compared to Firecracker?
From 1 comment
What are the differences compare to Firecracker?
StreamBright on HN
What workloads suit this runtime, such as FaaS or long-running processes?
From 1 comment
What kind of workloads make sense for this runtime? DIYFaaS? Or small, isolated long-running processes?
reilly3000 on HN
Alternatives named
Firecracker
From 1 comment
What are the differences compare to Firecracker?
StreamBright on HN
Solo5 hvt tender
From 1 comment
> In the end, KVM userspace VMMs (Virtual Machine Monitors) are learning from each other, giving users more options to choose from. Everybody wins. Indeed. Nice to see that the…
mato on HN
Kata Containers
From 1 comment
Function as a service is certainly one place. Others include secure container runtimes (eg. Kata-containers), sandboxing applications in general, and libguestfs.
rwmj on HN