But smolvm provides kernel-level isolation. Much closer to firecracker than docker.
If your networking stack and filesystem and who knows what else are exposed to the guest, its not isolation.
It’s better than Docker, but it can’t be compared to Firecracker at all. Firecracker actually minimizes the attack surface whereas smolvm does not
alt Hacker News
If your networking stack and filesystem and who knows what else are exposed to the guest, its not isolation.
It’s better than Docker, but it can’t be compared to Firecracker at all. Firecracker actually minimizes the attack surface whereas smolvm does not