Congrats on the launch - looks very interesting!
Are there any performance implications using this custom runtime?
Have you used this in production systems?
Are there any known limitations of using sysbox?
Are there any performance implications using this custom runtime?
Have you used this in production systems?
Are there any known limitations of using sysbox?
As far as using this in production, the software is well tested but has not been used in production to the best of our knowledge. It has room to mature still, both in term of functionality and security, but it's in pretty good shape already. We hope open-sourcing it allows it to mature it faster.
And as far as limitations, there are a few, here is a list: https://github.com/nestybox/sysbox/blob/master/docs/user-gui... . We hope to remove some of these as the product matures too.
We are out of the critical path, meaning we only emulate interactions with procfs / sysfs, and we only intercept mount syscalls at the moment, so we don't see any tangible performance hit. Having said that, we haven't done large scaling&perf tests yet.
Thanks for the response!