Enhance ramfs/zfs-less images

2017-11-09 Thread Waldek Kozaczuk
I found this article on OSv blog - http://blog.osv.io/blog/2017/06/12/serverless-computing-with-OSv/ - very interesting and inspiring. Besides the claim that OSv is a perfect platform for "serverless" it made me think that "stateless" does not apply only to "serverless" but also to many

Re: Remotely set cmdline

2017-11-09 Thread Nadav Har'El
On Thu, Nov 9, 2017 at 3:16 PM, Waldek Kozaczuk wrote: > Yep I had similar thoughts about security. I would imagine that on AWS one > would have a "build" EC2 instance where he/she would run capstan and spin a > "stem" OSv instance to upload files to and take snapshot to

Re: Remotely set cmdline

2017-11-09 Thread Nadav Har'El
On Thu, Nov 9, 2017 at 2:54 PM, wrote: > > Yes, security can be a problem with such approach, we're wide open for > some time until cpiod is finished. Then the unikernel is secure again. > From solutions that you suggest I'd go with the second suggestion. So >

Re: Remotely set cmdline

2017-11-09 Thread Waldek Kozaczuk
Yep I had similar thoughts about security. I would imagine that on AWS one would have a "build" EC2 instance where he/she would run capstan and spin a "stem" OSv instance to upload files to and take snapshot to create new AMI. The stem instance should NOT have a public IP and be only available