News for hackers. Stuff that matters.

A comment on Show HN: Launch VM workloads securely and instantaneously, without VMs.

Re:Show HN: Launch VM workloads securely and instantaneously... by elijahwright on Thursday April 29, 2021 @10:52AM (#26981911)
How is this different than the Xen approach?
[ Parent | on HN ]
Re:Show HN: Launch VM workloads securely and instantaneously... by ashishbijlani on Thursday April 29, 2021 @11:05AM (#26982101)
Xen is a full-fledged hypervisor that hosts VMs. It uses QEMU for I/O emulation in VMs, which increases the attack surface.

Kwarantine is a thin hypervisor that hosts containers. It uses hardware virtualization extensions, MMU, and page tables to provide the same level of security as VMs. Each container runs with a separate copy of the host kernel so that vulnerabilities/bugs are isolated. It does not use QEMU.

[ Parent | on HN ]