News for hackers. Stuff that matters.

A comment on Bottlerocket, an open source Linux distribution built to run containers. Parent comment

Re:Bottlerocket, an open source Linux distribution built to ... by fsflover on Wednesday September 02, 2020 @03:20AM (#24350845)
> Bottlerocket is optimized for running containers with high security isolation. The host OS is extremely minimal, it does not come with bash, an interpreter, ssh, or anything beyond the system basics needed to run containers. In fact it uses an immutable root filesystem. You aren't intended to run or install things directly on the host at all.Bottlerocket is optimized for running containers with high security isolation. The host OS is extremely minimal, it does not come with bash, an interpreter, ssh, or anything beyond the system basics needed to run containers. In fact it uses an immutable root filesystem. You aren't intended to run or install things directly on the host at all.

Sounds exactly like Qubes OS [0], but the latter is probably much more secure (based on Xen and VT-d). So in comparison Bottlerocket seems like trading some of security for performance.

[0] https://qubes-os.org

[ Parent | on HN ]
Re:Bottlerocket, an open source Linux distribution built to ... by egil on Wednesday September 02, 2020 @04:44AM (#24351236)
Qubes is for end user desktop/laptop usage, not service hosting.
[ Parent | on HN ]
Re:Bottlerocket, an open source Linux distribution built to ... by fsflover on Wednesday September 02, 2020 @05:39AM (#24351505)
Not yet for service hosting: https://www.qubes-os.org/news/2018/01/22/qubes-air/
[ Parent | on HN ]