Eline @eliine.dev · Nov 1

Being so tiny is obviously useful for scaling up new nodes quickly, so don’t underestimate that. It’s a ground-up rewrite of the userspace, from PID 1. Everything is written in go, so super fast and super safe.

0 likes 1 replies

?

Replies

Eline · Nov 1

That's not hyperbole - it's secured in a way a generic OS never could be. It’s fully immutable, which means the root fs is not even writable. Want to write something? That’s what a container with volumes is for. This gives tight separation of processes.