No, your assertion that you can bolt a userspace kernel on top of an insecure and bloated kernel to make it secure is false. A userspace kernel is just a vm like any other, in fact, a less secure vm at best.

So you should carefully read and consider the conversation before you write, least you come across as arrogant and foolish.

▲

kragen 9 hours ago | parent [-]

I haven't previously made an "assertion that you can bolt a userspace kernel on top of an insecure and bloated kernel to make it secure", but, as it happens, you can; that's how web browsers execute JavaScript, how Cloudflare Workers run Wasm, and how Firecracker runs virtual machines on Linux, for example.

Whether this works or not—or, more defensibly, how great the risk is—depends a great deal on the details.

I'm not really interested in how I appear to you, so I recommend you don't waste your time telling me about it.

	▲	asdfsa32 9 hours ago \| parent [-]
		But those are not Linux kernels and have very different memory model, hardware access, and so on and so on. But I don't think this is a technical conversation anymore, you have some other problems to address and it is best you do that.