Re:Hyperlight: Virtual machine-based security for functions ...
by stogot on Friday November 08, 2024 @12:09AM
(#42084343)
> The host can call functions implemented and exposed by the guest (known as guest functions).
Can you explain this a bit more? Why/when would a developer want to do this? What’s the advantage over firecracker?
Re:Hyperlight: Virtual machine-based security for functions ...
by dboreham on Friday November 08, 2024 @07:50AM
(#42086455)
It's faster (shorter start time).
Re:Hyperlight: Virtual machine-based security for functions ...
by rwmj on Friday November 08, 2024 @07:03AM
(#42086196)
libkrun (on Linux) is probably a closer comparison (though still not quite the same). https://github.com/containers/libkrun
Qemu/firecracker are in the same space - this is different.
These are most definitely in a different boat as you embed the guest functions inside the host program and then you register those functions. Taken from the readme:
> The host can call functions implemented and exposed by the guest (known as guest functions).
> Once running, the guest can call functions implemented and exposed by the host (known as host functions).
This is more in the 'safe plugin' type of space. As with most things in this space - the best way to learn about them is to simply try it out.