I like this alternative to titling.<p>The original headline is preserved, and clarified by the editorial clarification in square brackets. It would be great for HN to adopt this as a solution to the modified headline problem, with the provisio that editorial comment must only be used for the purposes of clarification.
Perhaps a bit off-topic, but I would like to get to the point where I can make intelligent comparisons between technologies like CoreOS and ZeroVM, and in general better understanding of containerization, virtualization etc. Can someone suggest a list of books that can get me started on that path?
Based on "Why ZeroVM?" (<a href="http://zerovm.org/wiki/Why_ZeroVM" rel="nofollow">http://zerovm.org/wiki/Why_ZeroVM</a>), a large part of the motivation for ZeroVM is based on the premise that regular VMs require a full OS and are therefore unacceptably fat. However, there are multiple platforms for running unmodified applications directly on VMs without requiring a traditional OS, e.g. the work I've been involved with: <a href="https://github.com/anttikantee/rumpuser-xen/" rel="nofollow">https://github.com/anttikantee/rumpuser-xen/</a><p>Determinism, OTOH, sounds interesting at least on paper. Is there any experience from tests with real applications in real world scenarios?
I've read the architecture doc (<a href="http://zerovm.org/wiki/Architecture" rel="nofollow">http://zerovm.org/wiki/Architecture</a>) and I loved it.<p>But, when you say tantalizing things like 'erlang-on-c', you raise the question: what does the clustering control plane look like?<p>One of the great things about erlang is that the cluster's got supervisors that receive execution-level messages (e.g. 'EXIT') and can then take whatever action they feel like. Is that control plane level exposed to ordinary containers?<p>And the other great thing about erlang is that the messaging model is either synchronous if you care (with return receipts) or asynchronous if you don't (fire and forget) -- and that richness turns out to have a bunch of good use cases. What's the ZeroVM story there?<p>And the other great thing about erlang is being able to trace out messages, especially when your synchronous architecture just took a dump on the sheets and is staring at you belligerently. Does ZeroVM have introspection figured out yet?
I cannot see what this has to do with security. At the end of the day, it is the data that attackers are after and the app needs to be able to access it whether it is virtualised or not.