virtink VS cloud-hypervisor

$ kubectl apply -f https://github.com/smartxworks/virtink/releases/download/v0.11.0/virtink.yaml  ✔   namespace/virtink-system created customresourcedefinition.apiextensions.k8s.io/virtualmachinemigrations.virt.virtink.smartx.com created customresourcedefinition.apiextensions.k8s.io/virtualmachines.virt.virtink.smartx.com created serviceaccount/virt-controller created serviceaccount/virt-daemon created clusterrole.rbac.authorization.k8s.io/virt-controller created clusterrole.rbac.authorization.k8s.io/virt-daemon created clusterrolebinding.rbac.authorization.k8s.io/virt-controller created clusterrolebinding.rbac.authorization.k8s.io/virt-daemon created service/virt-controller created deployment.apps/virt-controller created daemonset.apps/virt-daemon created certificate.cert-manager.io/virt-controller-cert created certificate.cert-manager.io/virt-daemon-cert created issuer.cert-manager.io/virt-controller-cert-issuer created issuer.cert-manager.io/virt-daemon-cert-issuer created mutatingwebhookconfiguration.admissionregistration.k8s.io/virtink-mutating-webhook-configuration created validatingwebhookconfiguration.admissionregistration.k8s.io/virtink-validating-webhook-configuration created $ kubectl get po,svc -A  ✔  NAMESPACE NAME READY STATUS RESTARTS AGE kube-system pod/local-path-provisioner-7b7dc8d6f5-8cwd8 1/1 Running 0 10m kube-system pod/coredns-b96499967-cc7fw 1/1 Running 0 10m kube-system pod/svclb-traefik-baea9d36-vjxzg 2/2 Running 0 10m kube-system pod/helm-install-traefik-crd-ghbn2 0/1 Completed 0 10m kube-system pod/svclb-traefik-baea9d36-2vw6x 2/2 Running 0 10m kube-system pod/helm-install-traefik-fc9xw 0/1 Completed 1 10m kube-system pod/svclb-traefik-baea9d36-g42x2 2/2 Running 0 10m kube-system pod/traefik-56cfcbb99f-5qgvd 1/1 Running 0 10m kube-system pod/metrics-server-84f8d4c4fc-wx8bl 1/1 Running 0 10m cert-manager pod/cert-manager-cainjector-5987875fc7-g94ft 1/1 Running 0 2m58s cert-manager pod/cert-manager-6dd9658548-slxrp 1/1 Running 0 2m58s cert-manager pod/cert-manager-webhook-7b4c5f579b-76x57 1/1 Running 0 2m58s virtink-system pod/virt-daemon-dv9m9 1/1 Running 0 41s virtink-system pod/virt-daemon-mv994 1/1 Running 0 41s virtink-system pod/virt-controller-768b979d4-gzlzt 1/1 Running 0 41s virtink-system pod/virt-daemon-jpz87 1/1 Running 0 41s NAMESPACE NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE default service/kubernetes ClusterIP 10.43.0.1 443/TCP 11m kube-system service/kube-dns ClusterIP 10.43.0.10 53/UDP,53/TCP,9153/TCP 11m kube-system service/metrics-server ClusterIP 10.43.21.66 443/TCP 10m kube-system service/traefik LoadBalancer 10.43.170.138 174.138.1.202,188.166.109.175,188.166.88.194 80:32630/TCP,443:30841/TCP 10m cert-manager service/cert-manager ClusterIP 10.43.182.103 9402/TCP 2m59s cert-manager service/cert-manager-webhook ClusterIP 10.43.136.111 443/TCP 2m58s virtink-system service/virt-controller ClusterIP 10.43.196.10 443/TCP 42s

Virtink is a Kubernetes add-on for running Cloud Hypervisor virtual machines. By using Cloud Hypervisor as the underlying hypervisor, Virtink enables a lightweight and secure way to run fully virtualized workloads in a canonical Kubernetes cluster.

There is no mention of cloud-hypervisor[1] (also in the rust-vmm ecosystem) in the article. It has the memory reclamation feature they require. It also support VFIO and virtiofs.

[1] <https://github.com/cloud-hypervisor/cloud-hypervisor>

https://github.com/tandasat/Hypervisor-101-in-Rust is there to help

https://github.com/cloud-hypervisor/cloud-hypervisor isn't educational necessarily but is one of the most technically progressive fastest developing highest funded vm projects ever, and there are oodles of tech talks on it. I am not qualified to make any specific recommendations, but there's tons of stuff here.

> The goal of the Cloud Hypervisor project differs from the aforementioned projects in that it aims to be a general purpose VMM for Cloud Workloads and not limited to container/serverless or client workloads.

Firecracker is such a great piece of technology. I'm amazed that AWS actually open-sourced it. All kudos to them. We're using Firecracker at our company to allow API companies build interactive demos like this one we built for Prisma [1].

[0] https://github.com/cloud-hypervisor/cloud-hypervisor

[1] https://playground.prisma.io

Relatively new project 'Cloud Hypervisor' https://github.com/cloud-hypervisor/cloud-hypervisor seems to launch images faster.

The Chrome OS hypervisor was then evolved/forked into Firecracker and Intel's Cloud Hypervisor, with the latter supporting both Linux and Windows. Perhaps Cloud Hypervisor would serve as a good backbone for sandboxing, with its Rust implementation and focus on security?

GitHub - cloud-hypervisor/cloud-hypervisor: A Virtual Machine Monitor for modern Cloud workloads. Features include CPU, memory and device hotplug, support for running Windows and Linux guests, device offload with vhost-user and a minimal compact footprint. Written in Rust with a strong focus on security.

Did you guys think about live migrations? https://github.com/cloud-hypervisor/cloud-hypervisor seems to support it and it shares a good amount of code with firecracker.

Virtink is a Kubernetes add-on for running Cloud Hypervisor virtual machines. By using Cloud Hypervisor as the underlying hypervisor, Virtink enables a lightweight and secure way to run fully virtualized workloads in a canonical Kubernetes cluster.