Thread

1. Hasz · 1790093335 · focus · HN ↗

   Hello, cool project!

   Can you explain to me what the benefit of using this is versus something like an LXC container? It is currently my preferred "temp dev env" that behaves like a full system. It can also be customized with cloud-init to load up my preferred settings.

   1. hnav · 1790093441 · focus · HN ↗

      gVisor virtualizes all syscalls which pass through a host userspace golang process that then maps onto the host's syscalls.

      1. tty456 · 1790098127 · focus · HN ↗

         That sounds like a huge hit to performance

         1. mixedbit · 1790100922 · focus · HN ↗

            Per syscall performance overhead has surprisingly low impact on overall performance of programs. gVisor&#x27;s benchmarks are here: <a href="https:&#x2F;&#x2F;gvisor.dev&#x2F;docs&#x2F;architecture_guide&#x2F;performance&#x2F;" rel="nofollow">https:&#x2F;&#x2F;gvisor.dev&#x2F;docs&#x2F;architecture_guide&#x2F;performance&#x2F;

Unofficial Hacker News client; not affiliated with Y Combinator.