Re:Kata Containers – The speed of containers, the security o...
by oblio on Thursday December 07, 2017 @06:18AM
(#15869132)
Does Windows have anything like this?
[ Parent
| on HN ]
Re:Kata Containers – The speed of containers, the security o...
by kuschku on Thursday December 07, 2017 @06:22AM
(#15869154)
Yes – HyperV containers (which Kata is actually inspired by) are much more secure than Linux’ namespaces.
Re:Kata Containers – The speed of containers, the security o...
by tilpner on Thursday December 07, 2017 @06:53AM
(#15869283)
> Kata Containers combines technology from Intel® Clear Containers and Hyper runV
but I can't find a mention of Hyper-V anywhere (which doesn't mean there was no inspiration). Maybe you confused Hyper runv and Hyper-V here (the naming certainly doesn't help)?
Re:Kata Containers – The speed of containers, the security o...
by kuschku on Thursday December 07, 2017 @02:42PM
(#15873312)
I might have just been confused due to the naming, but, as far as I can see, they’re using the exact same underlying technology, based on AMD’s and Intel’s virtualization extensions, to replace the sandboxing that is currently handled by kernel namespaces, jails, or HyperV containers (and, in some of these implementations, already uses this technology)