I posted a similar query on the Replit sandbox engine article, but..

How do people feel about the hardware isolation provided by microVMs versus the stronger end of software isolation techniques like gvisor?

Right now, we put a huge amount of stock in "hardware isolation". If that starts falling to agents to any substantial degree, I wonder whether we might end up leaning more on patchable software isolation, similar to the rise of software RAID (though, in userspace this time).

▲

wmf 8 hours ago | parent | next [-]

My intuition is that gVisor is never going to be stronger in a fair comparison. Almost all the vulns are in I/O code and every type of container/VM/sandbox has I/O.

▲

oasisaimlessly 9 hours ago | parent | prev | next [-]

FYI, gvisor also uses KVM under the hood; it's not completely orthogonal to [micro]VMs.

	▲	eddythompson80 8 hours ago \| parent [-]
		That's not the default gvisor option. It can use kvm, but by default (and most common setup in my limited experience) it doesn't.

▲

Melatonic 5 hours ago | parent | prev [-]

You mean virtualised hardware ? That's still technically software