https://labs.iximiuz.com/tutorials/unikernels-intro-93976514 #Unikernels #Dummies #Buzzwords #HackerNews #ngated
Hands-On Introduction to Unikernels
https://labs.iximiuz.com/tutorials/unikernels-intro-93976514
#HackerNews #Unikernels #Introduction #Hands-On #Tutorial #Tech #Innovation
Hiring: PhD Student / PostDoc in Systems Research
Join our team at TU Braunschweig to work on "Cumulus": OS/DBMS Co-Design for the Cloud. We are exploring Unikernels, novel OS abstractions, and Rust/C++ to eliminate overheads.
If you love low-level systems and compiler magic, this is for you!
📍 Braunschweig, Germany
💰 Full Position (TV-L E13)
Boosts appreciated! 🚀
https://www.ibr.cs.tu-bs.de/theses/vss/phd-vss-cumulus.html
#SystemsResearch #OSDev #RustLang #Cpp #PhDPosition #AcademicJobs #Germany #Unikernels
Toro: Deploy Applications as Unikernels
https://github.com/torokernel/torokernel
#HackerNews #Toro #Unikernels #Deployment #Applications #Technology #Innovation
StardustOS: Library operating system for building light-weight Unikernels
#HackerNews #StardustOS #Unikernels #LibraryOS #LightweightTech #CloudComputing
Unikernel Linux (UKL) (2023)
https://dl.acm.org/doi/10.1145/3552326.3587458
#HackerNews #Unikernel #Linux #UKL #2023 #virtualization #unikernels #techinnovation
e traditional difficulty with seccomp is figuring out the set of system calls that should be allowed. E.g., #Docker runs containers under a default policy that allows them to perform more than 250 system calls. When we have a unikernel as our process though, we can lock the set of calls right down.
So that’s how #unikernels as processes work. In place of the ukvm monitor there’s a component the authors call a tender. The tender is responsible for setup and exit handling as the ukvm monitor is. However, once file descriptors etc. are setup, the tender dynamically loads the unikernel code into it’s own address space. Then it configures seccomp filters to only allow system calls corresponding to the unikernel exits for I/O, and makes a one-way transition to this new mode. Finally it calls the entry point of the loaded unikernel. cc @aag
https://blog.acolyer.org/2018/11/14/unikernels-as-processes/
"Containers and Unikernels: Conceptually Similar, Fundamentally Different, and Inextricably Intertwined."
https://unikraft.io/blog/containers-and-unikernels/
🤔
In the longing for an explanation and comparison between the two, this article demonstrates how conceptually these two models are in fact the same primitive and how Unikraft uses containers to make unikernels.