Running Firecracker Under the Jailer
Harden the Firecracker process for safer multi-tenant use. You will run Firecracker under the jailer and learn how chroot, namespaces, cgroups, and seccomp reduce the blast radius of compromised guests in production-style deployments.
This course is temporarily unavailable
We've disabled nested virtualization following a series of serious security vulnerabilities in KVM and the Linux kernel. This course depends on it, so it will be available again once we can safely turn nested virtualization back on.
Work on Pause
We'll finish this part when work resumes
This course depends on nested virtualization, which is currently disabled for security reasons. Work is on hold until we can safely re-enable it. Once that happens, we'll pick up where we left off.
- Previous lesson
- Copy-on-Write Drive Volumes for Firecracker microVMs