News for hackers. Stuff that matters.

A comment on Fly.io Has GPUs Now. Parent comment

Re:Fly.io Has GPUs Now by yencabulator on Thursday February 15, 2024 @08:29PM (#39391904)
There has been weirdly little discussion on HN about Cloud Hypervisor. I guess because it's such a horribly bland non-descriptive Enterprise Naming name?

It looks pretty sweet. Rust & sharing libraries with Firecracker and ChromeOS's crosvm, with more emphasis on long-running stateful services than in Firecracker.

https://github.com/cloud-hypervisor/cloud-hypervisor

https://github.com/rust-vmm

[ Parent | on HN ]
Re:Fly.io Has GPUs Now by nolist_policy on Friday February 16, 2024 @04:28AM (#39394946)
Unfortunately, Cloud Hypervisor does not use strong sandboxing/privilege separation like crosvm does.
[ Parent | on HN ]
Re:Fly.io Has GPUs Now by yencabulator on Friday February 16, 2024 @03:10PM (#39402315)
For anyone else wanting to check on the status of this: it seems they're looking at a combination of seccomp, landlock and a systemd service instance per VM, with systemd doing DynamicUser, namespacing, and initial seccomp. Work seems to be happening right now, but of course it's telling and sad that it wasn't part of the original design.

https://github.com/cloud-hypervisor/cloud-hypervisor/issues/...

[ Parent | on HN ]