amitlimaye

5 ms·

1.
The second runtime is the real test: a no-kernel VM from Python to Node(amitlimaye1.substack.com)
3 points by amitlimaye 3mo ago|0 comments
2.
by amitlimaye 3mo ago
how do you resolve priorities between acl's with different mask shapes. Mask shapes here mean different don't care bits right. Also are the mask shapes for 5-tuple match essentially too large right. This works fine if the mask sha
3.
Six Numbers from Running 1,500 AI Agents Simultaneously(amitlimaye1.substack.com)
2 points by amitlimaye 3mo ago|1 comments
4.
by amitlimaye 5mo ago
yep this should be useful for non-manifest languages how does it actually work. tried bomtique on my toy C project it went pretty well. Does this work on something more complex like a dpdk app.
5.
by amitlimaye 5mo ago
ptrace is atleast 2 context switches that will make it pretty slow
6.
by amitlimaye 5mo ago
Actually you are right nothing is stopping it from reading but that does not help it escape the kernel. If you are worried about something adversarial that tries to detect its in a sandbox but that is not what we are trying to protect from
7.
by amitlimaye 5mo ago
yes that is the goal though C++ is something i am not targetting in the short term. The idea is to be able to run untrusted binaries in a vm with no kernel. saves memory makes for faster loads and the the bin cannot escape the vm so it can
8.
by amitlimaye 5mo ago
Int80 is a great idea but int3 is what i landed on when i was looking and at this point just trying to get something working. The good thing about int80 is a 2 byte instruction i believe rather than int3 + nop that i am doing right now
9.
by amitlimaye 5mo ago
AMA i am the author of that blog i have some working code just not something i want to share right away. Right now i am chasing density but yes security is something i will get to eventually. the issue is what to implement first :). This is
10.
by amitlimaye 5mo ago
seccomp is a very coarse filter and a very limited action set. think what you could do if you could see the payload of the syscall or change the output of a read syscall depending on agent identity.
11.
by amitlimaye 5mo ago
gvisor tries to be a complete kernel in userland we are not trying to. We will consciously choose never to try and support multi-proess env in the sandbox. The idea is there are enough people running single process containers and they can b
12.
by amitlimaye 5mo ago
The follow on posts describe where I plan to run the binaries. the idea is to run in a guest with no kernel and everything running at ring 0 that makes the sysret a dangerou thing to call. we don't have anything running at ring 3 also
13.
by amitlimaye 5mo ago
Good question. I didn't cover this in the post — the binary doesn't run on the host kernel directly. It runs inside a lightweight KVM-based VM with no operating system. The shim is the only thing handling syscalls inside the guest