[{"data":1,"prerenderedAt":239},["ShallowReactive",2],{"project-21461701":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":33,"aspects":34,"strip":39,"post_text":41,"what":42,"said":69,"maker_in_thread":144,"shape":151,"grid":155,"attempts":203,"same_week":204,"maker_shows":188,"maker_hidden":232,"reader_version":233,"card":234},"21461701","microvm","a minimalist machine type for QEMU inspired by Firecracker","title","Show HN: microvm – a minimalist machine type for QEMU inspired by Firecracker","https:\u002F\u002Fgithub.com\u002Fqemu\u002Fqemu\u002Fblob\u002Fmaster\u002Fdocs\u002Fmicrovm.rst","github.com","slpnix",1573042151,2019,145,20,302,2195,14,"notable","infrastructure","virtual machine monitor","other",[24,5,25,26,27],"qemu","firecracker","kvm","virtual machine","curious",0.02,{"positive":31,"neutral":32,"mixed":31,"critical":31},1,5,8,{"docs":35,"idea":37,"privacy":38},{"positive":31,"critical":36},0,{"positive":36,"critical":36},{"positive":36,"critical":31},[32,36,36,36,36,36,36,36,40,36,40,40,36,31,36,36,40,36,40,40],3,null,{"problem":43,"audience":41,"pricing":41,"motivation":41,"time_to_build":41,"stack":52,"openness":66,"stage":67,"team_size":68},{"value":44,"source":45,"evidence":46},"Running lightweight virtual machines with a minimal QEMU configuration","inferred",[47,49],{"id":48},"post",{"id":50,"by":11,"text":51},"21473064","From the guest perspective, the differences are minimal. Even boot time of the guest (thinking about a custom-built minimalist Linux kernel here) is roughly the same. On the host…",[53,61],{"value":54,"source":55,"evidence":56},"C","commenter",[57],{"id":58,"by":59,"text":60},"21475951","ketralnis","> \"Of the top 100 vulnerabilities reported for QEMU: > - 3 were not related to the C language wow",{"value":62,"source":63,"evidence":64},"QEMU","maker",[65],{"id":50,"by":11,"text":51},"open_source","launched","unknown",{"praise":70,"objections":84,"requests":99,"questions":104,"alternatives":126},[71,78],{"value":72,"source":55,"evidence":73},"Documentation includes precise, fully worked example commands",[74],{"id":75,"by":76,"text":77},"21472651","yjftsjthsd-h","Oh, nice: props for including precise, fully worked example commands to actually use this. This is so helpful in terms of onboarding and being able to actually get people to use…",{"value":79,"source":63,"evidence":80},"QEMU has a pretty good security record in the maker's view, with supporting data from KVM Forum talk",[81],{"id":82,"by":11,"text":83},"21475671","I think the slide 14 from the talk \"Reports of my Bloat Have Been Greatly Exaggerated\" [1] presented by Paolo Bonzini at KVM Forum 2019 gives some good perspective about QEMU's…",[85,92],{"value":86,"source":55,"evidence":87},"QEMU has a long track record of security bugs",[88],{"id":89,"by":90,"text":91},"21474642","rrdharan","> QEMU... has a pretty good security record That's an interesting and I would argue, contrarian take?…",{"value":93,"source":55,"evidence":94},"QEMU is a kitchen-sink design with a large attack surface",[95],{"id":96,"by":97,"text":98},"21477477","mato","> \"Of the top 100 vulnerabilities reported for QEMU: > - 65 were not guest exploitable > [...] Which leaves about 30 that presumably were guest exploitable. Don't get me wrong --…",[100],{"value":101,"source":55,"evidence":102},"Build a QEMU binary that only supports microvm devices",[103],{"id":96,"by":97,"text":98},[105,112,119],{"value":106,"source":55,"evidence":107},"Does TCG support make it easier to develop with in some environments?",[108],{"id":109,"by":110,"text":111},"21473657","maxmcd","Firecracker requires KVM, but QEMU can be used with instruction emulation, correct? Does that make this potentially a little easier to develop with in certain environments?",{"value":113,"source":55,"evidence":114},"What are the differences compared to Firecracker?",[115],{"id":116,"by":117,"text":118},"21472352","StreamBright","What are the differences compare to Firecracker?",{"value":120,"source":55,"evidence":121},"What workloads suit this runtime, such as FaaS or long-running processes?",[122],{"id":123,"by":124,"text":125},"21474635","reilly3000","What kind of workloads make sense for this runtime? DIYFaaS? Or small, isolated long-running processes?",[127,131,137],{"value":128,"source":55,"evidence":129},"Firecracker",[130],{"id":116,"by":117,"text":118},{"value":132,"source":55,"evidence":133},"Solo5 hvt tender",[134],{"id":135,"by":97,"text":136},"21474665","> In the end, KVM userspace VMMs (Virtual Machine Monitors) are learning from each other, giving users more options to choose from. Everybody wins. Indeed. Nice to see that the…",{"value":138,"source":55,"evidence":139},"Kata Containers",[140],{"id":141,"by":142,"text":143},"21476909","rwmj","Function as a service is certainly one place. Others include secure container runtimes (eg. Kata-containers), sandboxing applications in general, and libguestfs.",{"comments":40,"answered":40,"key":145},[146,149,150],{"id":147,"text":148},"21473929","That's correct. The initial versions of the microvm patch series did require KVM, but the one that got upstreamed does work with TCG [1], thanks to the QEMU's maintainers…",{"id":50,"text":51},{"id":82,"text":83},{"commenters":152,"max_depth":32,"maker_replies":40,"first_comment_mins":153,"lifespan_hours":154},15,1426,72,[156,158,162,165,168,171,173,176,180,182,184,187,189,191,193,195,197,199,201,202],[75,36,32,157,76,36],"maker\u002Fpositive\u002Fdocs",[159,36,36,160,161,36],"21473396","other\u002Fneutral\u002Fdocs","bloopernova",[163,36,36,160,164,36],"21476850","gigatexal",[166,36,36,160,167,36],"21477981","voltagex_",[169,36,36,160,170,36],"21478888","stock_toaster",[172,36,36,160,164,36],"21483048",[174,36,36,160,175,36],"21491052","antpls",[177,36,36,178,179,36],"21476996","other\u002Fcritical\u002Fdocs","loudmax",[109,31,40,181,110,36],"project\u002Fneutral\u002Fidea",[147,31,36,183,11,31],"project\u002Fneutral\u002Fperformance",[185,31,40,186,76,36],"21474051","project\u002Fneutral\u002Fprivacy",[116,188,40,181,117,36],2,[50,188,36,190,11,31],"project\u002Fpositive\u002Fidea",[89,188,31,192,90,36],"project\u002Fcritical\u002Fprivacy",[82,188,36,194,11,31],"project\u002Fpositive\u002Fprivacy",[58,188,36,196,59,36],"other\u002Fneutral\u002Fnone",[96,188,40,198,97,36],"project\u002Fmixed\u002Fidea",[135,188,36,200,97,36],"other\u002Fpositive\u002Fidea",[123,40,40,181,124,36],[141,40,40,181,142,36],[],[205,210,214,219,223,227],{"id":206,"name":207,"points":208,"category":209},"21417965","Simplescraper",332,"dev_tools",{"id":211,"name":212,"points":213,"category":209},"21439918","Tailwind Builder",295,{"id":215,"name":216,"points":217,"category":218},"21418882","HR code",124,"languages",{"id":220,"name":221,"points":222,"category":20},"21423612","kubeadm-playbook",122,{"id":224,"name":225,"points":226,"category":218},"21427363","Domino",116,{"id":228,"name":229,"points":230,"category":231},"21462993","multi-object-tracker",105,"ai",false,"v2",{"id":235,"name":5,"line":6,"ai":232,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":29,"top":18,"kw":236,"maker":11,"domain":10,"tier":19,"attempts":36,"strip":237,"url":9,"mix":238,"praise":72,"objection":86,"sub":21},21461701,[24,5,25,26,27],"50000000303301003033",[31,32,31,31],1794036582679]