Unikraft is a fast, secure and open-source Unikernel Development Kit

Re:Unikraft is a fast, secure and open-source Unikernel Deve... by staticassertion on Monday February 07, 2022 @01:01PM (#30248528)

Thanks, I think having a "read more" would be helpful. You do a good job of quickly demonstrating performance with some numbers, but there's nothing about security on there. I think it'd go a long way for people like me who are going to be immediately skeptical of software in C claiming to be safe.

[ Parent | on HN ]

Re:Unikraft is a fast, secure and open-source Unikernel Deve... by nderjung on Monday February 07, 2022 @01:20PM (#30248833)

Thanks for the feedback, we're in the process of adding a security section[0] which will detail more on the on-goings, but we'll work on adding more highlights on the main page.

I need to highlight we have separate research[1][2] which will make its way upstream soon which aims to provide hardening between internal libraries (e.g. isolating the network stack or scheduler) using gates like Intel MPK or separate hardware-accelerated services.

[0]: https://github.com/unikraft/docs/pull/32

[1]: https://project-flexos.github.io/

[2]: https://github.com/project-flexos/unikraft

[ Parent | on HN ]

Re:Unikraft is a fast, secure and open-source Unikernel Deve... by staticassertion on Monday February 07, 2022 @01:44PM (#30249146)

Pretty cool, will definitely read through that.

[ Parent | on HN ]