6 ms·
This will also make a lot of difference once we can run lightweight, userspace kernels ("rump kernels").
by trasz4 3y ago
This will also make a lot of difference once we can run lightweight, userspace kernels ("rump kernels").
- yjftsjthsd-h 3y ago> once we can run lightweight, userspace kernels ("rump kernels"). Er, didn't NetBSD accomplish that... like a decade ago, now? Or is FreeBSD looking into supporting rump kernels?
- trasz4 3y agoYes, NetBSD did accomplish that, but I expect it to become more commonplace.
- EuropeOverlords 3y agobut question is, is this solution for people running software on other peoples computers ? or solution for running my own code on my own computer only ?
- yjftsjthsd-h 3y agoDoes it matter? Running kernel pieces in userspace is useful in both directions (rather like docker), and in both cases we'd like it to run as quickly as possible.
- trasz4 3y agoFor my particular case it's about something similar in purpose to sandboxing, but with providing the compartment (ie a process subtree) with an alternative kernel to talk to, to minimise the attack surface between that container and the host kernel.