Comment by clhodapp
20 hours ago
I posted a similar query on the Replit sandbox engine article, but..
How do people feel about the hardware isolation provided by microVMs versus the stronger end of software isolation techniques like gvisor?
Right now, we put a huge amount of stock in "hardware isolation". If that starts falling to agents to any substantial degree, I wonder whether we might end up leaning more on patchable software isolation, similar to the rise of software RAID (though, in userspace this time).
My intuition is that gVisor is never going to be stronger in a fair comparison. Almost all the vulns are in I/O code and every type of container/VM/sandbox has I/O.
FYI, gvisor also uses KVM under the hood; it's not completely orthogonal to [micro]VMs.
That's not the default gvisor option. It can use kvm, but by default (and most common setup in my limited experience) it doesn't.
You mean virtualised hardware ? That's still technically software