Open-sourcing gVisor, a sandboxed container runtime | Google Cloud Blog
Open-sourcing gVisor, a sandboxed container runtime Containers have revolutionized how we develop, package, and deploy applications. However, the system surface exposed to containers is broad enough that many security experts don't recommend them for running untrusted or potentially malicious applications. A growing desire to run more heterogenous and less trusted workloads has created a new inter
AWS EC2 Virtualization 2017: Introducing Nitro
Recent posts: 28 Apr 2023 » eBPF Observability Tools Are Not Security Tools 01 Mar 2023 » USENIX SREcon APAC 2022: Computing Performance: What's on the Horizon 17 Feb 2023 » USENIX SREcon APAC 2023: CFP 02 May 2022 » [email protected] 15 Apr 2022 » Netflix End of Series 1 09 Apr 2022 » TensorFlow Library Performance 19 Mar 2022 » Why Don't You Use ... 26 Sep 2021 » The Speed of Time 06 Sep 2021 »
Introducing Dockercast – the Docker Podcast | Docker Blog
Products Docker DesktopContainerize your applicationsDocker HubDiscover and share container imagesDocker ScoutSimplify the software supply chainDocker Build Cloud Speed up your image buildsTestcontainers Desktop Local testing with real dependenciesTestcontainers Cloud Test without limits in the cloud See our product roadmapMORE resources for developers
エンジニアãªã‚‰çŸ¥ã£ã¦ãŠããŸã„仮想マシンã®ã—ã㿠記事一覧 | gihyo.jp
é‹å–¶å…ƒã®ãƒã‚´ Copyright © 2007-2024 All Rights Reserved by Gijutsu-Hyoron Co., Ltd. ページ内容ã®å…¨éƒ¨ã‚ã‚‹ã„ã¯ä¸€éƒ¨ã‚’ç„¡æ–ã§åˆ©ç”¨ã™ã‚‹ã“ã¨ã‚’ç¦æ¢ã—ã¾ã™â 。個別ã«ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ãŒè¨å®šã•ã‚Œã¦ã„る記事ç‰ã¯ãã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã«å¾“ã„ã¾ã™ã€‚
KVMã®ãªã‹ã¿(KVM internals) - ã‚‹ãã™ã®æ—¥è¨˜ ~ Out_Of_Range ~
VMMã®é«˜é€ŸåŒ–ã«ã¤ã„ã¦å¦ã¶éŽç¨‹ã§KVMã®ã‚³ãƒ¼ãƒ‰ã‚’èªã‚“ã ã®ã§ã€ メモ代ã‚ã‚Šã«å†…éƒ¨æ§‹é€ ã®è§£èª¬è¨˜äº‹ã‚’書ãã¾ã—ãŸã€‚ KVMã¯qemuã¨é€£æºã—ã¦å‹•ä½œã™ã‚‹ãŸã‚ã€ä»¥å‰ç§ãŒæ›¸ã„ãŸQEMU internals( http://rkx1209.hatenablog.com/entry/2015/11/15/214404 ) ã‚‚åˆã‚ã›ã¦ã”å‚ç…§ãã ã•ã„。ã¾ãŸæœ¬è¨˜äº‹ã¯ã‚る程度システムプãƒã‚°ãƒ©ãƒ ã«æ…£ã‚Œã¦ãŠã‚Šã€ VT-xや仮想化ã®åŸºæœ¬ã‚¢ãƒ¼ã‚テクãƒãƒ£ã¯çŸ¥ã£ã¦ã„る物ã¨ã—ã¦é€²ã‚ã¾ã™ã€‚ 1.qemu-kvm,kvmã®åˆæœŸåŒ– ã§ã¯æ—©é€Ÿè¦‹ã¦è¡Œãã¾ã—ょã†ã€‚ã¾ãšã¯KVMã®åˆæœŸåŒ–ã®å…¥ã‚Šå£ã¨ãªã‚‹qemu-kvmサイドã‹ã‚‰è¦‹ã¦ã„ãã¾ã™ã€‚(ã¡ãªã¿ã«ç¾åœ¨qemu-kvmã¯qemu本家ã«çµ±åˆã•ã‚Œã¦ãŠã‚Šconfigを変ãˆã‚‹ã“ã¨ã§kvmを有効化ã™ã‚‹ä»•æ§˜ã«ãªã£ã¦ã„ã¾ã™) qemuã¯/dev/kvmを通ã—ã¦KVMã¨ã‚„ã‚Šå–ã‚Šã‚’è¡Œã„ã¾ã™ã€‚全体的ãªã‚¢ãƒ¼ã‚テクãƒ
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Paravirtualized ticket spinlocks [LWN.net]
Hyperprobe: Towards Virtual Machine Extrospection | USENIX
Performance Isolation of Network Virtualization for Cloud Computing
GitHub - google/novm: Experimental KVM-based VMM for containers, written in Go.
{{#tags}}- {{label}}
{{/tags}}