Using Virtual Machines to Improve Container Security with Rkt v0.8.0 (opens in new tab)

A good intro to clear containers here, it's really fascinating reading: http://lwn.net/Articles/644675/

This might be viewed as slightly OT but this entire container security thing always reminds me how important it is to build on the right ecosystem.

This technology has been available for years on other platforms in a stable fashion. The fact that they never get used for different reasons is always sobering

Although the article says Intel VT-x, the demo successfully runs on an AMD CPU with SVM although with this warning:

  [    0.000000] KERNEL supported cpus:
  [    0.000000]   Intel GenuineIntel
  [    0.000000] CPU: vendor_id 'AuthenticAMD' unknown, using generic init.
  [    0.000000] CPU: Your system may be unstable.

I also think it's worth mentioning that Intel® Clear Containers now supports Docker as well.

Disclaimer: I work for Kismatic.

It's exciting to see further investment in Intel® Clear Containers. At Kismatic, we have been fans (0) of Clear Containers since the beginning!

(0): https://kismatic.com/technical/quickstart-intel-clear-linux-...