News for hackers. Stuff that matters.
Re:Kata Containers – The speed of containers, the security o... by oblio on Thursday December 07, 2017 @06:18AM (#15869132)
Does Windows have anything like this?
Re:Kata Containers – The speed of containers, the security o... by kuschku on Thursday December 07, 2017 @06:22AM (#15869154)
Yes – HyperV containers (which Kata is actually inspired by) are much more secure than Linux’ namespaces.
Re:Kata Containers – The speed of containers, the security o... by tilpner on Thursday December 07, 2017 @06:53AM (#15869283)
> Kata Containers combines technology from Intel® Clear Containers and Hyper runV

but I can't find a mention of Hyper-V anywhere (which doesn't mean there was no inspiration). Maybe you confused Hyper runv and Hyper-V here (the naming certainly doesn't help)?

Re:Kata Containers – The speed of containers, the security o... by kuschku on Thursday December 07, 2017 @02:42PM (#15873312)
I might have just been confused due to the naming, but, as far as I can see, they’re using the exact same underlying technology, based on AMD’s and Intel’s virtualization extensions, to replace the sandboxing that is currently handled by kernel namespaces, jails, or HyperV containers (and, in some of these implementations, already uses this technology)
Re:Kata Containers – The speed of containers, the security o... by cbzbc on Thursday December 07, 2017 @07:27AM (#15869452)
runV is a oci compatible drop in replacement for runC that can execute containers on a number of backend virtualisation environments, including Hyper-V and KVM
Re:Kata Containers – The speed of containers, the security o... by jchw on Thursday December 07, 2017 @07:33AM (#15869475)
That's coincidence, though. runV wasn't inspired by Hyper-V.