News for hackers. Stuff that matters.
Re:My VM is lighter (and safer) than your container (2017) by fnord123 on Thursday September 08, 2022 @09:54AM (#32765522)
Title is kinda clickbaity (wha-? how can a VM be lighter than a container). It's about unikernels.
Re:My VM is lighter (and safer) than your container (2017) by throwaway894345 on Thursday September 08, 2022 @11:44AM (#32767274)
> how can a VM be lighter than a container

It's still clickbaity, but the title implies a comparison between a very lightweight VM and a heavy-weight container (presumably a container based on a full Linux distro). You could imagine an analogous article about a tiny house titled "my house is smaller than your apartment".

Re:My VM is lighter (and safer) than your container (2017) by turkishmonky on Thursday September 08, 2022 @04:17PM (#32771495)
Not to mention, in the paper, the lightvm only had an advantage on boot times. Menory usage was marginally worse than docker, even with the unikernel, and debian on lightvm was drastically worse for cpu usage than docker (the unikernel cpu usage was neck and neck with the debian docker contaner).

I could see it being an improvement over other VM control planes, but docker still wins in performance for any equivalant comparisons.

Re:My VM is lighter (and safer) than your container (2017) by marcosdumay on Thursday September 08, 2022 @12:07PM (#32767616)
It is still lighter in memory only. CPU is also a relevant thing to compare them.
Re:My VM is lighter (and safer) than your container (2017) by JeanSebTr on Thursday September 08, 2022 @10:54AM (#32766501)
Exactly, unikernels are great for performance and isolation, but that can't be compared to a full application stack running in a container or VM.
Re:My VM is lighter (and safer) than your container (2017) by OrvalWintermute on Thursday September 08, 2022 @09:04PM (#32774082)
Not all containers are a "full application stack"

A unikernel can definitely be compared.

Re:My VM is lighter (and safer) than your container (2017) by nailer on Thursday September 08, 2022 @11:47AM (#32767314)
Firecracker VMs are considered lighter than a container and are pretty old at this point.
Re:My VM is lighter (and safer) than your container (2017) by sidkshatriya on Thursday September 08, 2022 @12:00PM (#32767506)
I would say that firecracker VMs are not more lightweight than Linux containers.

Linux containers are essentially the separation of Linux processes via various namespaces e.g. mount, cgroup, process, network etc. Because this separation is done by Linux internally there are not that many overheads.

VMs provide a different kind of separation one that is arguably more secure because it is backed up hardware -- each VM thinks it has the whole hardware to itself. When you switch between the VM and the host there is quite a heavyweight context switch (VMEXIT/VMENTER in Intel parlance). It can take a long time compared to just the usual context switch from one Linux container (process) to another host (process) or another Linux container (process).

But coming back to your point, no firecracker VMs are not lighter/lightweight than a Linux container. They are quite heavyweight actually. But the firecracker VMM is probably the most nimble of all VMMs.

Re:My VM is lighter (and safer) than your container (2017) by pjmlp on Friday September 09, 2022 @04:02AM (#32776601)
Which in case someone has failed to notice, is pretty much how serverless happens to work out from development point of view.

No one cares how the language runtime is actually running.