6 ms·

Do these containers share a common kernel? Or are they each ran in a separate VM? Edit: It's a VM per container. https://github.com/apple/container/blob/main/d

Do these containers share a common kernel? Or are they each ran in a separate VM? Edit: It's a VM per container. https://github.com/apple/container/blob/main/docs/technical-overview.md https://github.com/apple/container/blob/main/docs/technical-...

leshenka 3mo ago
Isn't it wasteful? I know it's a "tiny" vm but still is a vm
- pjmlp 3mo ago
  See Kata containers. https://katacontainers.io/ https://katacontainers.io/ For ultimate security, containers alone aren't enough. Windows is also having a similar feature on top of WSL, announced at BUILD. https://github.com/microsoft/mxc https://github.com/microsoft/mxc
  - Melatonic 3mo ago
    Isnt this a micro VM and not a container? Confused
    - pjmlp 3mo ago
      A micro VM than encapsulates a single container inside, two levels of protection.