exxo_

6 ms·

1.
by exxo_ 5y ago
If one can measure the whole boot process and verify the attestation "remotely", why would he need secureboot on top of that?
2.
by exxo_ 6y ago
There are several things that can impact performance on "traditional" container runtimes. For example, cgroups, LSMs, seccomp (especially with spectre mitigations), network NS/bridges, etc. There are also more subtle things l
3.
by exxo_ 6y ago
It is the same idea, we actually considered it at first. There are some differences in the implementation though and we built enroot with the idea of being more extensible. We also have a plugin for SLURM ( https://github.com&#x2F
4.
by exxo_ 7y ago
Simple unprivileged container runtimes: https://github.com/NVIDIA/enroot https://github.com/hpc/charliecloud
5.
Unprivileged Container Runtime in Bash(github.com)
1 points by exxo_ 7y ago|0 comments
6.
Unprivileged Container Runtime in Bash(github.com)
2 points by exxo_ 7y ago|0 comments
7.
by exxo_ 9y ago
Maybe it's time to have national referendums...
8.
by exxo_ 9y ago
This is the first revision: https://github.com/coreutils/coreutils/blob/ccbd1d7dc5189f46...
9.
by exxo_ 9y ago
Speed vs readability: https://github.com/coreutils/coreutils/blob/master/src/yes.c https://github.com/openbsd/src/blob/master/usr.bin/yes/yes.c
10.
by exxo_ 10y ago
We (NVIDIA) recently moved away from Quay/Github/Jenkins to Gitlab for our deep learning automation and the experience so far has been truly amazing. We were able to automate our most complex DL container pipeline in a matter of d
11.
by exxo_ 10y ago
If you want more insights, I suggest you read the section "Internals". I'm not going to dwell on the details but there are many reason why doing so can go horribly wrong. Believe me, we (NVIDIA) evaluated our options and know
12.
by exxo_ 10y ago
I think you are missing the point, it has nothing to do with installing the NVIDIA drivers through Docker. What you are showing[1] is how to install NVIDIA drivers on CoreOS the hackish way (not persistent, no driver libs, no DKMS, no UVM,
13.
by exxo_ 11y ago
You can already have dots in IPv6 addresses if it's an IPv4-mapped/compatible address (e.g. ::FFFF:129.144.52.38)
14.
by exxo_ 11y ago
You need the NVIDIA drivers and the nvidia-docker plugin. $ docker-machine create --driver amazonec2 --amazonec2-instance-type g2.2xlarge ... $ docker-machine ssh <host> # install the NVIDIA driver and nvidia-docker-plugin $ eval `doc