Xen is not a container, compare it to qemu/KVM more.
I would not host untrusted customers in docker containers, LXC, but I would in Xen HVM any day.
I would not host untrusted customers in docker containers, LXC, but I would in Xen HVM any day.
Intel doesn't recommend running untrusted code even in a separate VM, according to their official explanation of Spectre/Meltdown. At least we can do it on RPi now.
Couldn't we already do it on an RPi with linux/kvm+qemu?