Hacker News new | past | comments | ask | show | jobs | submit | more mcrute's comments login

Firecracker serves an entirely different purpose from Kubernetes. Kubernetes is a cluster scheduler but the containers being scheduled still need a runtime (typically Docker, containerd, or CRI-O) to execute the process within the container. These runtimes typically share a single Linux kernel instance and use the kernel cgroups feature to isolate workloads. In multi-tenant environments where each tenant is running unrestricted code this presents and unacceptably high security risk. If a hacker compromises one container and escapes the cgroup confinement they can potentially impact the security of other containers. Fargate is the building block for an alternative container runtime that uses extremely lightweight VMs and isolated kernel instances instead of the more traditional approach of sharing a kernel between all processes.


You can also see an early proof of concept integration with containerd at https://github.com/firecracker-microvm/firecracker-container...


Any plan to integrate Firecracker with CRI? Or you think it's more like serving for specific purpose like Serverless?



The a1.medium 12-month reserved cost is $151 which is about $12.60 a month.


Large parallel computation jobs such as machine learning model training that require massive amounts of data would benefit from instances like this.


It benefits neither the company nor the candidate to have the candidate be overly stressed out all day. Lunch also gives the candidate the chance to chat informally to a potential colleague and for that potential colleague to make a pitch for why it's cool to work at the company and live in the area. If the lunch buddy does their job well the candidate should leave excited to work for the company and in good spirits for the last half of the interview. On top of that both people get a free lunch. Definitely not a waste of time.


Agreed. About half the candidates I take out to lunch in some way ask "is working here as stressful as the rumors say?"

I think it is worth it to the company for me to spend the 5 extra minutes of my time (since I'm going to eat lunch anyway) and $25 on lunch to defuse those concerns and sell them on the team. With the phone screen, the interviews, the feedback forms and the debrief, the company is spending a ton of time on each candidate brought on site. Loosing a candidate you make an offer to is the worst waste of time.


> half the candidates I take out to lunch in some way ask "is working here as stressful as the rumors say?"

And what do you tell them / what do you think?


That's not accurate. The lunch buddy is there to give the candidate some relaxing time off of interviewing, allow them to get a good lunch, and to ask questions "off the record" to a potential colleague. Informally it is the job of the lunch buddy to make a pitch for why the candidate should consider working for the company, and if relocation is on the table, what's neat about the area and why the candidate should consider moving.

The lunch buddy doesn't get the option to enter feedback for a candidate and often doesn't even get invited to the interview debrief. They really are there just for lunch.

Source: have been a lunch buddy several times.


I have been a lunch buddy too, sure they can told u that it was not an interview but nothing in this world is ever black and white. The person I'm having lunch is probably will be my future coworker so if this person doing something stupid or something I don't like during the lunch, there is no guarantee I will not hinted it to the hiring manager later on.


Normally an SSD has an on-board flash controller that communicates something like NVME or SATA to the host and a protocol like CFI to the actual NAND chips, it will also map from disk blocks (OS unit of storage) to NAND columns and cells using an internally stored table. These chips do a lot of other mundane things like wear leveling for NAND, clearing written cells, etc. If the T2 is taking the place of this controller and communicating directly with the NAND chips it would be at best duplicative of an external SSD controller and at worst completely incompatible.


Thanks :-)


Based on the marketing photos on the Apple site it sure looks like the NAND is soldered to the board and not socketed.


Based on the marketing images on their website it sure looks like the NAND is soldered to the board.


Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: