On: Mirage – A programming framework for building type-safe, modular systems

[skgough]

The FAQ mentions that this can run in QEMU. Are there cloud providers that support hosting a custom ISO? I feel like that would be hard to secure.

[PhilipRoman → skgough]

Lots of them. VPS typically are not secured at the os level, but as separate VMs. For the cloud provider it's just a matter of picking an ISO (plus a few management extensions but those are usually optional)

[iampims → PhilipRoman]

Digitalocean supports it: https://docs.digitalocean.com/glossary/iso-image/

[hannesm → skgough]

good news is that MirageOS can as well be executed in a seccomp context with only 5 or 7 system calls allowed -- see the spt target of solo5 https://github.com/solo5/solo5 -- also this great talk by mato https://archive.fosdem.org/2019/schedule/event/solo5_unikern...