Memory Deduplication: The Curse that Keeps on Giving [video]

Re:Memory Deduplication: The Curse that Keeps on Giving [video] by eternalban on Sunday January 08, 2017 @09:07AM (#13349705)

I am watching it now but he's talking about VMs ("KVM") and not "containers".

As to why we're in this mess, this rather amusing talk by B. Cantrill discusses the history: https://youtu.be/hgN8pCMLI2U

(Linux) Containers are not VMs: https://wiki.archlinux.org/index.php/Linux_Containers

[ Parent | on HN ]

Re:Memory Deduplication: The Curse that Keeps on Giving [video] by antoniob on Sunday January 08, 2017 @09:41AM (#13349828)

Thanks for the youtube link! Didn't see that one before.

Regarding the attacks and how they relate to containers. It's true that two of the attacks were targeting KVM/KSM i.e. VMs. But one attack was entirely inside a process and conceptually the problem also applies to containers.

https://openvz.org/Comparison

I haven't yet looked at different container implementations but the row 'Page sharing' suggests that there might be some form of memory deduplication.

You could probably use KSM under Linux across containers by registering all memory to KSM through madvise() and MADV_MERGEABLE (http://man7.org/linux/man-pages/man2/madvise.2.html).

https://openvz.org/KSM_(kernel_same-page_merging)

[ Parent | on HN ]

Re:Memory Deduplication: The Curse that Keeps on Giving [video] by eternalban on Sunday January 08, 2017 @09:49AM (#13349862)

> conceptually the problem also applies to containers.

Yep. c.f. BC's talk @ 34:21 "To improve storage efficiency"

[ Parent | on HN ]