News for hackers. Stuff that matters.
Re:Announcing qboot, a minimal x86 firmware for QEMU by colin_mccabe on Friday May 22, 2015 @03:22AM (#9586938)
I think the main argument in favor of Xen was that it would have a smaller attack surface for hackers than KVM. After all, Xen is a hypervisor-based solution, whereas with KVM you are running the full Linux kernel plus qemu as your host.

With that being said, there have been exploits in the Xen hypervisor. As more hardware integration gets added, dom0 starts to look a lot more like a traditional kernel.

Personally, I use kvm for all my virtual machines, since I don't want to run everything under dom0.

Re:Announcing qboot, a minimal x86 firmware for QEMU by justincormack on Friday May 22, 2015 @07:18AM (#9587650)
The option to run qemu in stub domains is a big advantage, or not run qemu at all if you use PV.
Re:Announcing qboot, a minimal x86 firmware for QEMU by walterbell on Friday May 22, 2015 @04:27AM (#9587107)
> Personally, I use kvm for all my virtual machines, since I don't want to run everything under dom0

Did you mean Xen?

Re:Announcing qboot, a minimal x86 firmware for QEMU by colin_mccabe on Friday May 22, 2015 @04:26PM (#9590744)
kvm doesn't have dom0. More generally, you can run kvm on an unmodified SuSE (or other Linux distribution) kernel.
Re:Announcing qboot, a minimal x86 firmware for QEMU by kasabali on Saturday May 23, 2015 @05:58AM (#9592481)
AFAIK xen is also in upstream kernel and there should be no difference in this regard.