Preferences

btbuilder parent
Sounds like you are describing containers; while not emulation neither is virtualization. There are many more opportunities for escape dealing with Linux containers than virtualization due to the increased complexity of the interface.

While I'm impressed by the work Microsoft have done to support the Linux kernel interfaces I would imagine the complexity of the effort to implement correct behavior from Windows kernel primitives would lead to more potential security vulnerabilities.

Another comparison might be Linux syscall support within illumos[1] which AFAIK relies on mature Solaris Zones for isolation.

[1] https://www.slideshare.net/bcantrill/illumos-lx


danieldk
Sounds like you are describing containers; while not emulation neither is virtualization.

Another possibility would be User-mode Linux (UML), in contrast to containers, it gives each 'virtual machine' its own Linux kernel, where the Linux kernel runs as another Linux program.

This item has no comments currently.