undefined | Better HN

0 pointskuschku8y ago0 comments

Yes – HyperV containers (which Kata is actually inspired by) are much more secure than Linux’ namespaces.

0 comments

> Kata Containers combines technology from Intel® Clear Containers and Hyper runV

but I can't find a mention of Hyper-V anywhere (which doesn't mean there was no inspiration). Maybe you confused Hyper runv and Hyper-V here (the naming certainly doesn't help)?

kuschkuOP8y ago

I might have just been confused due to the naming, but, as far as I can see, they’re using the exact same underlying technology, based on AMD’s and Intel’s virtualization extensions, to replace the sandboxing that is currently handled by kernel namespaces, jails, or HyperV containers (and, in some of these implementations, already uses this technology)

cbzbc8y ago

runV is a oci compatible drop in replacement for runC that can execute containers on a number of backend virtualisation environments, including Hyper-V and KVM

jchw8y ago

That's coincidence, though. runV wasn't inspired by Hyper-V.

j / k navigate · click thread line to collapse