Hacker News new | past | comments | ask | show | jobs | submit login

Where did this extra VM come from?



An OCI container (what people call Docker containers) are just applications that run on a Linux kernel.

That is, you need a Linux kernel underneath for the containers to run on. More often than not, that Linux kernel is running in a virtual machine.

When you run Docker Desktop on your Windows or macOS machine, how do you think it runs that Alpine Linux container? It works because there is a virtual machine running Linux that all the Docker containers run on top of.

If you are running Linux directly on real hardware, your containers do not need a VM. Everywhere else, they do.


Well, AWS, typically.


Are you sure? Are those instances a VM or another docker container? Does anyone from amazon know?


It's a custom VM they wrote called Nitro: https://aws.amazon.com/ec2/nitro/


Depends what part you mean.

AWS Fargate / Lambda are Firecracker VMs. EC2 are normal VMs.


See https://katacontainers.io

Turns out only containers is not secure enough.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: