Nanos – A Unikernel

• nanos

  27 2,468 9.2 C

  A kernel designed to run one and only one application in a virtualized environment

  

I am a bit confused, there are three sites:

* https://nanos.org/

* https://nanovms.com/

* https://ops.city/

And I am not sure what "thing" I am using. Is there some disambiguation? I know is OPS is the orchestration CLI, but I am confused at the difference between Nanos and NanoVMs. What should I call the section of my README that deals with this tech? Currently gone with Nanos/OPS but I am confused.

• zig

  816 30,631 10.0 Zig

  General-purpose programming language and toolchain for maintaining robust, optimal, and reusable software.

  

We need to remove that. We did have a channel on freenode a while back but got rid of it.

Outside of gh discussions there is also https://forums.nanovms.com/. We made a decision a while ago to follow Zig's lead here and have no 'official' community space (https://github.com/ziglang/zig?tab=readme-ov-file#community) instead letting people form their own spaces.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• isolate

  6 892 6.9 C

  Sandbox for securely executing untrusted programs

  

The last time I tried, it was pretty slow to fire up, especially when I tried to run multiple submissions at once. It's also even more overkill for my use case; I currently use isolate (https://github.com/ioi/isolate) which is just a wrapper around cgroups/namespaces, and it's been a lot faster.

Sidenote: I'm not really looking to replace it, I was just asking out of curiosity since this is my first time hearing of unikernels

• unikernels

  2 536 0.0 C++

  Unikernel and immutable infrastructures

  

About unikernels https://github.com/cetic/unikernels?tab=readme-ov-file#unike...

• runc

  32 11,428 9.3 Go

  CLI tool for spawning and running containers according to the OCI specification

  

I can speak to this. Containers, and by extension k8s, break a well known security boundary that has existed for a very long time - whether you are using a real (hardware) server or a virtual machine on the cloud if you pop that instance/server generally speaking you only have access to that server. Yeh, you might find a db config with connection details if you landed on say a web app host but in general you still have to work to start popping the next N servers.

That's not the case when you are running in k8s and the last container breakout was just announced ~1 month ago: https://github.com/opencontainers/runc/security/advisories/G... .

At the end of the day it is simply not a security boundary. It can solve other problems but not security ones.

• ops-examples

  4 97 6.9 Python

  A repository of basic and advanced examples using Ops

  

Yeh - we have a small language list here:

https://github.com/nanovms/ops-examples

If you're looking for a particular piece of software search on the repo first:

https://repo.ops.city/

If you don't find it and need help creating one ping me or open an issue in ops.

• OPS

  11 1,198 8.7 Go

  ops - build and run nanos unikernels

  

I am a bit confused, there are three sites:

* https://nanos.org/

* https://nanovms.com/

* https://ops.city/

And I am not sure what "thing" I am using. Is there some disambiguation? I know is OPS is the orchestration CLI, but I am confused at the difference between Nanos and NanoVMs. What should I call the section of my README that deals with this tech? Currently gone with Nanos/OPS but I am confused.

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project