MicroVM daemon, deploy any Docker image
MicroVM daemon, deploy any Docker image
https://github.com/herd-core/herd Lately, I have been trying to understand the security aspect of docker containers, and what I have realized is that all docker containers share the host's kernel. Any zero day vulnerability in the kernel can be used to gain access to the host os. In order to deal with this, I did some research turns out Amazon has open sourced the core technology behind their serverless technology lambda. But in its current state its very hard to setup, let alone run anything securely. This technology is called firecracker microvm's It started off as a go library, for creating process pools to just do a simple firecracker spawn, turned into a full fledged host side daemon. deploying a microvm through a docker image is now as simple as running `herd deploy --image postgres:latest -p 5432:5432 -e POSTGRES_PASSWORD=postgres` with boot times ~500ms PS - I recently lost access to `Greptile` free code review for OSS projects, my repo stars (38) < 50. Could you guys please bump them up slightly :))
Share cardActual performance
Launch Intel predictions
Analyze your own launch →Incorrect prediction on native model
Similar products
Heroku Emacs Docker Image
Encapsulate Angular WebExtension Dependencies in a Docker Image
TensorfFlow Docker image for Intel (amd64) and ARM/M1 (arm64) archs
Hyperlocal DNSSEC Validating Unbound Docker Image
Deploy Docker Image to AWS Elastic Beanstalk
Docker-repack – Speed up Docker image pulls
Bunkerized-Nginx – Nginx Docker image secure by default
Docker Image Promoter That Needs No Privileges (Or Docker)
Show HN :Deploy and manage docker images on any IaaS/On-Premise
Deploy your web Docker project without downtime