News for hackers. Stuff that matters.
Re:Firecracker: Secure and fast microVMs for serverless comp... by imhoguy on Saturday March 07, 2020 @02:40PM (#22513547)
Containers are provided by host kernel cgroups and namespaces, therefore the kernel implements attach (exec) operation which is practically running a new proces (e.g. bash) in a cgroup (container).

Virtual Machines are provided by software or hardware emulation which run separate guest OS with own kernel. There is no standard way for a host to let you run any process and interact with its stdio inside guest OS because the host simply is not aware what you exactly run inside.

The solution is to have an agreed connectivity standard both on the guest and the host. The guest can provide SSH server, telnet server serial terminal, irc bot or some other kind of control capability. Then of course host needs a tooling too, e.g. SSH client.

Re:Firecracker: Secure and fast microVMs for serverless comp... by CameronNemo on Saturday March 07, 2020 @03:09PM (#22513703)
Are there any real alternatives to SSH and/or sftp? E.g. a mutual TLS authenticated HTTP server...
Re:Firecracker: Secure and fast microVMs for serverless comp... by wmf on Saturday March 07, 2020 @09:22PM (#22515887)
virtio-vsock
Re:Firecracker: Secure and fast microVMs for serverless comp... by Demiurge on Sunday March 08, 2020 @01:01AM (#22516581)
Why not use a virtual terminal? That seems like a pretty standard machine interface to use if the machine is virtualized.