TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Unikraft is a fast, secure and open-source Unikernel Development Kit

192 点作者 nderjung超过 3 年前

19 条评论

ryukoposting超过 3 年前
I&#x27;m an embedded guy by trade, so the idea of a Unikernel is nothing new to me. But wait... use cases overlapping with general-purpose OSes? nginx benchmarks??? This is exciting.<p>I know DevOps for bare-metal firmware is a PITA partly because of the tightly-coupled application, kernel, and libraries. I&#x27;m hoping someone familiar with Unikraft&#x2F;OSv&#x2F;etc could sate my curiosity...<p>- Do you test your app inside a container before building your Unikraft&#x2F;OSv image? Or is there a way to create a CI&#x2F;CD pipeline that builds your unikernel executable + tests the whole thing as a compiled unit?<p>- How often do bugs appear in Unikraft that don&#x27;t appear when running the app on a traditional OS? To what extent does the complexity of the app&#x27;s dependencies affect this?<p>- In terms of convenience, how does Unikraft&#x2F;OSv compare to using a highly-customizable general-purpose* OS like Gentoo?<p>(*edit for clarity: &quot;general-purpose OS&quot; in the sense that it 1) can load arbitrary data using one or more filesystems 2) can execute loaded data as a program 3) has means by which a human or human-controlled machine may cause the OS to load and execute said programs. This definition does not exclude highly-specialized Gentoo&#x2F;Nix&#x2F;whatever setups that are tailored to run a particular program)
评论 #30249009 未加载
mscdex超过 3 年前
I was a bit surprised to find out that Unikraft does not yet support multiple cores&#x2F;CPUs (at least on kvm and x86): <a href="https:&#x2F;&#x2F;github.com&#x2F;unikraft&#x2F;unikraft&#x2F;pull&#x2F;244" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;unikraft&#x2F;unikraft&#x2F;pull&#x2F;244</a>
评论 #30249844 未加载
dang超过 3 年前
Past related threads:<p><i>Unikraft – Fast, Specialized Unikernels</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=26954547" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=26954547</a> - April 2021 (72 comments)<p><i>Unikraft: Posix-Like Unikernel</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=26142285" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=26142285</a> - Feb 2021 (10 comments)<p><i>Cut Your Cloud Computing Costs by Half with Unikraft</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=25431474" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=25431474</a> - Dec 2020 (5 comments)<p><i>Unikraft Unikernel Project</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=17439594" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=17439594</a> - July 2018 (14 comments)
moritonal超过 3 年前
&quot;Begun the unikernel wars, have&quot;<p>From my fairly naive-POV it seems like UniKernels are the next logical step in computing. Docker being the last jump and unikernels sitting to be the next with some form of WASM as a host.
评论 #30248158 未加载
invokestatic超过 3 年前
I went with OSv (another unikernel) for a previous pet project and, while I really loved the concept, I found the tooling to be immature. This project’s tooling and documentation does looks better so I look forward to trying it out.<p>One thing I find missing with these unikernels though is IPSec support and Firewalls. I’d love to throw a unikernel image on DigitalOcean and have a secure software-defined IPSec tunnel.
评论 #30248147 未加载
评论 #30248534 未加载
评论 #30248825 未加载
mwcampbell超过 3 年前
I&#x27;ve recently become thoroughly convinced of the merits of consolidating onto as few machines (physical or virtual) as possible. One reason is that I recently consolidated some of my company&#x27;s infrastructure onto a single bare-metal server to reduce costs. And then in the middle of that, this post came out:<p><a href="https:&#x2F;&#x2F;rachelbythebay.com&#x2F;w&#x2F;2022&#x2F;01&#x2F;27&#x2F;scale&#x2F;" rel="nofollow">https:&#x2F;&#x2F;rachelbythebay.com&#x2F;w&#x2F;2022&#x2F;01&#x2F;27&#x2F;scale&#x2F;</a><p>It seems to me that running lots of small VMs with unikernels is inherently wasteful compared to running many processes on a single machine with a shared kernel that can make optimal use of the machine&#x27;s resources. Sure, the unikernel-based VMs can be smaller than equivalent Linux VMs, but one still has to allocate a fixed amount of RAM, storage, and (for public cloud platforms) CPU to each VM. We inevitably add some padding to those allocations to ensure that we have headroom, and the total probably adds up to more than we would need to allocate to a single machine (physical or virtual) running all of those processes on a single kernel. And on public cloud platforms, we have to pay for those padded resource allocations.<p>I&#x27;ve certainly done deployments with lots of small Linux VMs in the past; in my recent migration process, I was replacing such a setup with one big box. Creating lots of small VMs is certainly a convenient and robust way to independently deploy and update several components. But it&#x27;s obviously not the only way.<p>The home page of the forthcoming Unikraft Cloud service says, &quot;The cloud is essential to your business but you know you are overpaying.&quot; But I think a better answer is to consolidate onto a few big VMs, using container orchestration to keep deployment manageable.
评论 #30252785 未加载
评论 #30270474 未加载
评论 #30254843 未加载
anikuni超过 3 年前
This is an exciting project, congratulations. I&#x27;m looking forward to the docs on embedded usage, and also which languages are supported and how to configure them. For now there seems to be quite a few unikraft&#x2F;app* repos with such examples.
评论 #30259810 未加载
johngalt超过 3 年前
Are unikernels a performance&#x2F;efficiency tool? Squeezing more nodes into a single host with minimal overhead.<p>Or are they a tool to achieve simplicity&#x2F;elegance? Fewer moving parts to troubleshoot at the OS layer, and smaller but more formal composition.
评论 #30249718 未加载
评论 #30249708 未加载
andai超过 3 年前
&gt;Unikraft has been extensively evaluated in terms of performance. Evaluations of using off-the-shelf applications on Unikraft results in a 1.7x-2.7x performance improvement compared to Linux guests. In addition, Unikraft images for these apps are around 1MB, require less than 10MB of RAM to run, and boot in around 1ms on top of the VMM time (total boot time 2ms-40ms).<p><a href="https:&#x2F;&#x2F;unikraft.org&#x2F;docs&#x2F;features&#x2F;performance&#x2F;" rel="nofollow">https:&#x2F;&#x2F;unikraft.org&#x2F;docs&#x2F;features&#x2F;performance&#x2F;</a>
staticassertion超过 3 年前
Says it&#x27;s secure, Github shows 76% of the code is in C. I see the word &quot;secure&quot; in a few places but it&#x27;s just stated without any indication as to what about this makes it secure.
评论 #30248186 未加载
Terry_Roll超过 3 年前
This is an excellent security tool by removing the attack vectors of the OS.<p>Who needs a lite&#x2F;minimal&#x2F;headless version of an OS, when you can use this instead?<p>Suddenly I dont need those xeon processors, a few Raspbery Pi zero&#x27;s will do and the environmentalists should be happy.<p>Shame the SBC link is lite on information! <a href="https:&#x2F;&#x2F;unikraft.org&#x2F;docs&#x2F;features&#x2F;embedded&#x2F;" rel="nofollow">https:&#x2F;&#x2F;unikraft.org&#x2F;docs&#x2F;features&#x2F;embedded&#x2F;</a>
评论 #30256037 未加载
phendrenad2超过 3 年前
Unikernels are interesting, but as long as people treat them like &quot;linux without linux&quot; they won&#x27;t go far.<p>The real potential of unikernels comes from making apps that are more self-aware and take up some of the functions previously handled by linux (such as monitoring memory usage).
评论 #30250199 未加载
Youden超过 3 年前
How does one store data with Unikraft? This is the problem I hit with other unikernel projects. OSv seemed to support ZFS or NFS somehow but I couldn&#x27;t quite figure out the documentation. I can&#x27;t find any references to storage at all for Unikraft.
评论 #30252750 未加载
halation_effect超过 3 年前
Reference paper[1].<p>[1] <a href="https:&#x2F;&#x2F;dl.acm.org&#x2F;doi&#x2F;10.1145&#x2F;3447786.3456248" rel="nofollow">https:&#x2F;&#x2F;dl.acm.org&#x2F;doi&#x2F;10.1145&#x2F;3447786.3456248</a>
edsiper2超过 3 年前
ah!<p>[ERROR ] GitHub rate limit exceeded! If you have not done so already,<p>[ERROR ] you can tell kraft to use a personal access token when contacting<p>[ERROR ] the GitHub API. First, visit:
评论 #30248042 未加载
jonpalmisc超过 3 年前
Anyone have experience using projects like this? Are the performance gains (and&#x2F;or other benefits) that noticeable?
评论 #30249015 未加载
matthewfcarlson超过 3 年前
I’m quite curious how something like this compares to a more performance focused RPi OS like dietPI
评论 #30252128 未加载
Koshkin超过 3 年前
&gt; <i>166% faster</i><p>Ew. I hope they mean &quot;2.66 times as fast.&quot;
评论 #30249056 未加载
dantodor超过 3 年前
How does it compare with nanovms ?
评论 #30263516 未加载