Re:Open-sourcing gVisor, a sandboxed container runtime
by monocasa on Wednesday May 02, 2018 @01:11PM
(#16979031)
> To correct one misconception, the project is not bound to ptrace. There is a generic platform interface, and the repository also includes a KVM-based platform (wherein the Sentry acts as guest kernel and host VMM simultaneously) described in the README. The default platform is ptrace so that it works out of the box everywhere.
Doesn't have even worse perf than ptrace? The time I tried to do that, I ended up getting bit by the rough 4 contexts switches to get most anything done. Guest->host_kernel->host_user_vmm->host_kernel->guest
Or are you just saying that if/when some third option that doesn't suck as much comes out, you'd be able to hopefully transparently switch to it?
Doesn't have even worse perf than ptrace? The time I tried to do that, I ended up getting bit by the rough 4 contexts switches to get most anything done. Guest->host_kernel->host_user_vmm->host_kernel->guest
Or are you just saying that if/when some third option that doesn't suck as much comes out, you'd be able to hopefully transparently switch to it?