Microhypervisors

Anybody who has experience with them? If yes, which one? I've been doing a lot of research on virtualization and it seems that even the arguably most secure hypervisor (Xen) had 20+ security vulnerabilities in the last 3 years Also, how secure do you think virtualization really is? Would somebody be better off using openBSD with strict unveil/pledge rules rather than using a VM?

OpenBSD maintainers are very anti-hypervisor. theres a reason vmm is so minimal, they believe that anything more becomes exceptionally hard to verify for its correctness (multicore etc) and sure enough it seems like every hypervisor has been shown to be pretty broken. That said Xen does some very important things that I don't believe OpenBSD does, which is full driver isolation. Even if the core is secure its always the code relating to peripheral that seem to be done really soykaftily and I don't think anything else really fills this role. I haven't tried any microhypervisors but L4Linux and Genode seem interesting (the latter isnt a hypervisor i think but its still similar role) I don't think running all software on the same hardware is a good idea at all to be honest at this point, the ideal would be some kind of multiplexer dom0 that renders programs being run on a fleet of raspberry pis, but thats really easier said than done... also each raspi still has to have drivers to use things like ethernet which is assumed to be full of issues :( you really cant win at this security thing..

>>25434 This is the best answer I've seen in years, without the fanboy hype and F.U.D whenever somebody asks a "Qubes-like vs . BSD"? Thank you.

>>25434 just have more than one computer. you don't need everything linked to a master system when you can walk across your room instead

>>25434 Is there a equivalent for isolation of installed drivers on linux since most are using non-free? >you really cant win at this security thing.. Yeah you can use a screen keyboard fr