Cloud Virtualization: Red Hat, AWS Firecracker, and Ubicloud internals
ubicloud.com
ubicloud.com
Red Hat is now shipping Kata Containers, which does not (much to my dismay) use Libvirt, and also KubeVirt which uses Libvirt but not for sandboxing (only to drive QEMU; Kubernetes takes care of the sandboxing by running one VM per pod). But the original architecture is still in use and new users appeared such as cockpit-machine and crun-vm.
Another super interesting project for KVM userspace is libkrun which, among other things, is being used for gaming on Arm Mac's. :)
Firecracker's scope has grown somewhat, in particular it supports snapshots for warm start of VMs.
QEMU's microvm didn't have a huge success but recently Amazon contributed support for running Nitro enclaves in QEMU, which reuses a lot of the microvm code.
Some Rust components have been developed to build virtio devices out of process (for example virtiofsd). QEMU is also experimenting with devices written in Rust, and I expect to have two almost-entirely-safe-Rust devices (converted from C) within a month or two.
https://www.ubicloud.com/blog/building-infrastructure-contro...
On the data plane side, we use different open source components and our choice of programming language depends on them. For example for virtualization, we rely on Linux KVM and the Cloud Hypervisor. The former is in C and the latter in Rust.
A fair number of the dependencies we have also have 100% branch coverage, because I copied the practice, starting about ten years ago, from Jeremy Evans, who maintains a huge number of libraries under that principle. That includes "Sequel," the ORM that I've used for many years and originally copied the practice from, around 2015. You can see the libraries he maintains in this way: http://code.jeremyevans.net/ruby.html. He has joined Ubicloud somewhat recently, so I look forward to getting a sense of how he completes the rest of his rather singular & extraordinary maintenance regime.
To have Ubicloud rest at this standard is my objective. My tendentious claim is as follows: this is higher than any other constellation of libraries I have seen in any programming language. If anyone knows of any constellation of libraries that is more capably and rigorously maintained in any language, let me know. The bar as roughly as follows they need to release every month, or something like that (yes really: https://rubygems.org/gems/sequel/versions/), have a wide interface with your program, and break it no more than once every five years.
It's also not a Rails program, and I have never written or maintained a Rails program in any seriousness, which makes me an odd duck among longtime Ruby programmers.