You're talking to a trans woman by the way. Just thought I should throw that out there just in case you want to hurl some insults at me while you're at it too :)
You slipped in "based on sex" for an intentional reason that I'd like you to share with the class. Say, is your opinion of the "sex is an immutable characteristic and fixed at birth and therefore trans people are invalid and should..."? Or maybe I'm just reading into your wording a little too much.
If not (and you’re just raw-dogging Linux network/pid namespaces), I can see how you’ll struggle with persistence. The snapshots are larger with microVMs, but with userfaultfd, you’re able to lazily load pages back into memory as they’re accessed. Happy to chat more, my whole day job is making microVMs persistent :)
Which you are! What ever happened to the MIG implementation work that y’all were working on? Last I heard it was “cursed” and nearly made someone go insane, which is very normal for NVIDIA hardware :)
Those aren’t even the correct answer for the use-case in question, anywho. What they’re looking for would actually be sops (https://github.com/getsops/sops), or age (made by the fantastic Filo Sottile: https://github.com/FiloSottile/age), or, hell, just using libsodium sealed boxes. AMS KMS or Vault is perhaps even worse of an answer, Actually
Hey HN! This is my first ever engineering blog post on how we at DevZero built our whole networking stack on top of WireGuard & Tailscale's open-source technologies. Please let me know what you think :)
Would be cool if we see something come out that uses the Apple native Virtualization.framework so you can use the nested Rosetta extensions on M1. Dunno if that's been done yet.