News for hackers. Stuff that matters.

A comment on FreeBSD on Firecracker. Parent comment

Re:FreeBSD on Firecracker by beardedwizard on Thursday August 24, 2023 @05:09PM (#37254584)
I have seen zero evidence of this; but if it's true I would love to learn more. The real action is in side channel vulnerabilities bypassing all manner of protections.
[ Parent | on HN ]
Re:FreeBSD on Firecracker by eddythompson80 on Thursday August 24, 2023 @07:34PM (#37255936)
see

https://cloud.google.com/blog/products/serverless/cloud-run-...

[ Parent | on HN ]
Re:FreeBSD on Firecracker by beardedwizard on Friday August 25, 2023 @03:28PM (#37266056)
But this is because the workloads they execute changed, right? Http only before, to more general code today. I didn't see anything there that said gvisor was inferior, only that a new requirement was full kernel api access. For latency sensitive ephemeral and constrained workloads gvisor/seccomp can make a lot of sense and in the case of google handle multi-tenancy.

Now if workloads become less ephemeral and more general purpose, tolerance for startup latency goes up, annd probability of bespoke needs goes up making VM more palatable.

[ Parent | on HN ]