News for hackers. Stuff that matters.
Re:Open-sourcing gVisor, a sandboxed container runtime by stphantom on Wednesday May 02, 2018 @11:27AM (#16977832)
You are right in that ptrace is slow and nasty. The key problem, I believe, is the tracer-tracee mode that involves two host processes and the switch is asynchronous (ptrace(SYSEMU) and then waitpid).

We do have the KVM platform that offers the synchronous switch, which performs better if you have bare-metal virtualization support.

There are no comments on this comment yet.