News for hackers. Stuff that matters.
Re:Hyperlight: Virtual machine-based security for functions ... by apitman on Thursday November 07, 2024 @02:31PM (#42080010)
Don't see any mention of firecracker, which is the first thing I think of in this space. Anyone have a TL;DR comparison?
Re:Hyperlight: Virtual machine-based security for functions ... by eyberg on Thursday November 07, 2024 @05:04PM (#42081612)
Firecracker can run ordinary linux/GPOS vms and unikernels.

Unikernels can run inside of firecracker.

Unikernels are focused on single applications whereas general purpose operating systems are focused on multiple applications.

This is focused on running functions embedded inside a host program. So it is fairly different than other things out there and in a class of its own.

Re:Hyperlight: Virtual machine-based security for functions ... by ATechGuy on Thursday November 07, 2024 @05:29PM (#42081827)
> each function request to have its own hypervisor for protection.

They are talking about isolating serverless functions, not host program functions. In that sense, it is exactly what Firecracker does for lambda functions

Re:Hyperlight: Virtual machine-based security for functions ... by eyberg on Thursday November 07, 2024 @05:59PM (#42082072)
Firecracker boots up a runtime that has a full blown operating system in it - lambda just happens to call a known program with a known function. In that sense sure it provides similar functionality but it's really quite different. That's not what fly uses firecracker for, for instance.

Qemu/firecracker are in the same space - this is different.

These are most definitely in a different boat as you embed the guest functions inside the host program and then you register those functions. Taken from the readme:

> The host can call functions implemented and exposed by the guest (known as guest functions).

> Once running, the guest can call functions implemented and exposed by the host (known as host functions).

This is more in the 'safe plugin' type of space. As with most things in this space - the best way to learn about them is to simply try it out.

Re:Hyperlight: Virtual machine-based security for functions ... by stogot on Friday November 08, 2024 @12:09AM (#42084343)
> The host can call functions implemented and exposed by the guest (known as guest functions).

Can you explain this a bit more? Why/when would a developer want to do this? What’s the advantage over firecracker?

Re:Hyperlight: Virtual machine-based security for functions ... by dboreham on Friday November 08, 2024 @07:50AM (#42086455)
It's faster (shorter start time).
Re:Hyperlight: Virtual machine-based security for functions ... by rwmj on Friday November 08, 2024 @07:03AM (#42086196)
libkrun (on Linux) is probably a closer comparison (though still not quite the same). https://github.com/containers/libkrun