10 ms·
Creator of matchlock here. You can directly use Docker/OCI compatible images (e.g. ubuntu:24.04) as the rootfs with the `--image` flag. You can also build imag
by jingkai_he 7mo ago
Creator of matchlock here. You can directly use Docker/OCI compatible images (e.g. ubuntu:24.04) as the rootfs with the `--image` flag.
You can also build image with `matchlock build -f Dockerfile -t foo:bar .` - Under the hood it builds the image using buildkit inside the microvm.
- indigodaddy 7mo agoThanks for the response! How would matchlock microvms perform on a KVM VM without CPU passthrough, or is it not possible?
- jingkai_he 7mo agoI'm predominantly using Linux vm workstation with nested virt enabled. It performs reasonably well with nested virtualisation. I haven't tested the scenario of non-cpu-accelerated workload, but I'd expect the performance to be very poor. That said it might be possible with PVM as the above thread has mentioned.
- indigodaddy 7mo agoAny chance you could look into potentially adding the option to use PVM (eg so a PVM mode instead of KVM) in your matchlock/firecracker implementation? See https://blog.alexellis.io/how-to-run-firecracker-without-kvm-on-regular-cloud-vms/ https://blog.alexellis.io/how-to-run-firecracker-without-kvm...
- codethief 7mo agoI've been following PVM only from afar but it certainly seems interesting, albeit documentation is sparse. (Thanks for the link!) Are you using it productively?