Show HN: A 10KiB kernel for cloud apps

(github.com)

43 points by ianseyler3 hours ago

2 comments

  • yjftsjthsd-h57 minutes ago
    Given that this is (AFAICT) a way to efficiently run exactly one program on a machine (probably a VM), I would have liked to see more time spent on the particulars of getting a program running on it. Like, can you easily run existing software on BareMetal? Could you compile nginx to run on it? Or does software have to be written specifically for this environment? And either way, how exactly do you actually build your software for/into(?) the image?
    • ianseyler9 minutes ago
      The plan is to get existing *nix programs ported over, yes. That will require some more work (ideally a compatibility layer/library).
    • cestith34 minutes ago
      You can’t run most Unix&#x2F;Linux apps without porting.<p><a href="https:&#x2F;&#x2F;github.com&#x2F;ReturnInfinity&#x2F;BareMetal-Examples&#x2F;blob&#x2F;main&#x2F;PORTING.md" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;ReturnInfinity&#x2F;BareMetal-Examples&#x2F;blob&#x2F;ma...</a>
  • bflesch2 hours ago
    Sorry this might be an extremely stupid question, but can you please explain the benefits of this and what other (larger?) alternatives are?<p>I understand that this &quot;exokernel&quot; provides more performant hardware access for software and it seems to be written from scratch in assembler.<p>Does this mean that one should expect a lot of security and robustness issues, which means it should only be used for internal services and never be exposed to untrusted networks?
    • heliumtera1 hour ago
      If one decides to boot an arbitrary system, pointing at whatever would be the latest version of exec.asm, it doesn&#x27;t even matter what the project is today and whatever the setup script is doing. If one chooses to use this, one decides to handover the virtual machine ownership. Your system is whatever OP decides, now or in the future.<p>Edit: made a clear mistake here. One would clearly not be booting on lates version of exec.asm. It would be libBareMetal.asm instead.<p>Sorry for confusion guys, totally safe and effective<p>if [ -x &quot;$(command -v curl)&quot; ]; then curl -s -o libBareMetal.asm <a href="https:&#x2F;&#x2F;raw.githubusercontent.com&#x2F;ReturnInfinity&#x2F;BareMetal&#x2F;master&#x2F;api&#x2F;libBareMetal.asm" rel="nofollow">https:&#x2F;&#x2F;raw.githubusercontent.com&#x2F;ReturnInfinity&#x2F;BareMetal&#x2F;m...</a> else wget -q <a href="https:&#x2F;&#x2F;raw.githubusercontent.com&#x2F;ReturnInfinity&#x2F;BareMetal&#x2F;master&#x2F;api&#x2F;libBareMetal.asm" rel="nofollow">https:&#x2F;&#x2F;raw.githubusercontent.com&#x2F;ReturnInfinity&#x2F;BareMetal&#x2F;m...</a> fi