34 points d3Xt3r 1 hour ago 6 comments
up2isomorphism 42 minutes ago | parent
The issue with this kind of thing is nobody will take it seriously.
mbreese 35 minutes ago | parent
Why? Because a user space kernel is a bad idea? Or because of the AI use when writing it?
I’m still trying to figure out exactly what it is.
up2isomorphism 25 minutes ago | parent
Why should someone spend anytime on this kind of technical piece that is not created by human? Think about what you will get from this, the answer is pretty obvious.
asdfsa32 30 minutes ago | parent
This is kind of the wrong approach when linux namespaces exist and rootless namespaces are approach full spectrum.
stingraycharles 12 minutes ago | parent
I’m still fascinated by the approach, though. It seems to me that it sits somewhere between cgroups and virtual machines.
I do wonder what problem it solves, as I don’t think that it provides the same security guarantees that micro-VMs like firecracker do?
eddythompson80 5 minutes ago | parent
It’s the same approach as gVisor. Fairly decent isolation if your application can work on it, but your SOL if a scenario comes up that doesn’t work. VMs give you pretty much 100% Linux compatibility at the expense of density, optimal resource allocation and startup time. gVisor gives you excellent startup time, resource allocation and density at the expense of some app compat.