Re:Python is 1.3x faster by just adjusting some compiling op...
by derefr on Saturday June 12, 2021 @06:07PM
(#27487809)
Doesn’t gVisor require symbol interposition to do its sandboxing thing? (At least, for binaries with static-linked runtimes, like the type Golang produces by default.)
[ Parent
| on HN ]
Re:Python is 1.3x faster by just adjusting some compiling op...
by dathinab on Saturday June 12, 2021 @06:45PM
(#27488034)
If you have a fully static-linked library you already don't have symbol interposition.
Furthermore this options still allow the thinks you need interposition for, for calls from/to external dynamic linked libraries like libc.
But most important gVisor is based around intercepting system calls (over simplified), for which you don't need symbol interposition.
Re:Python is 1.3x faster by just adjusting some compiling op...
by falldmg on Saturday June 12, 2021 @06:14PM
(#27487846)
Symbol interposition? I don't know for sure, but I would guess gVisor is using ptrace or another mechanism, to interpose on syscalls, not library calls. But these flags, I believe, only impact interposition of symbols in the same library, so even if gVisor did use interposition for something, it may not matter.