Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yes – HyperV containers (which Kata is actually inspired by) are much more secure than Linux’ namespaces.


> Kata Containers combines technology from Intel® Clear Containers and Hyper runV

but I can't find a mention of Hyper-V anywhere (which doesn't mean there was no inspiration). Maybe you confused Hyper runv and Hyper-V here (the naming certainly doesn't help)?


I might have just been confused due to the naming, but, as far as I can see, they’re using the exact same underlying technology, based on AMD’s and Intel’s virtualization extensions, to replace the sandboxing that is currently handled by kernel namespaces, jails, or HyperV containers (and, in some of these implementations, already uses this technology)


runV is a oci compatible drop in replacement for runC that can execute containers on a number of backend virtualisation environments, including Hyper-V and KVM


That's coincidence, though. runV wasn't inspired by Hyper-V.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: