They do different things Minimus provide images with less at
—
משתתפים
—
הודעות
—
טווח תאריכים
2026-08-09
Noam Salit
They do different things
Minimus provide images with less attack vectors (minimal packages, etc.)
Kata images (also gvisor) provides isolation (sandboxing) by removing access to system calls (or intercepting them and running some policy on them) - 2 different layers of protection, they can (and should) live together
Noam Salit
They do different things
Minimus provide images with less attack vectors (minimal packages, etc.)
Kata images (also gvisor) provides isolation (sandboxing) by removing access to system calls (or inte…
@140376778223711 keep me sane here, making sure I got this right
12:19
Liran
Noam Salit
@140376778223711 keep me sane here, making sure I got this right
Yes 100%
12:23
Noam Salit
Liran
No such thing as stupid questions stack overflow is dead lol..
This is a hardened registry
meaning it minimizes the amount of entries someone may have to the machine running the code
Then, the se…
Out of interest, that should also be cost efficient, right? Less memory, less storage, less compute (background processes)
Is that also something you see or only focused on the security angle?
12:26