🚀FTL: A Userspace OS Design for Clouds
Containers as Secure as VMs? FTL Aims to Make It Happen
TL;DR
FTL is a new userspace OS design that aims to make lightweight containers as secure as VMs. It's compatible with Linux binaries and runs a Rust-based HTTP server. FTL's roadmap includes filesystem support, Node.js and Go support, and 64-bit Arm support by early 2027.
FTL is a novel userspace OS design that allows building your own OS as a library. This approach makes it easier to add features, debug, and upgrade the OS safely. Each container runs a userspace OS, which is a shared library implementing Linux concepts like processes, VFS, and TCP/IP. The FTL kernel isolates containers better than existing monolithic kernels, providing a hypervisor-like interface based on lightweight hardware-based isolation. If you're running lightweight containers, FTL could be a game-changer, offering the security of VMs and the flexibility of microkernels. FTL's first release, v0.0.1, includes a simple Linux HTTP server, while v0.1.0 adds support for async Rust apps. The roadmap includes filesystem support, Node.js and Go support, and 64-bit Arm support by early 2027.
Key Points
FTL's userspace OS design allows building OS as a library, making it easier to add features and debug.
FTL kernel isolates containers better than monolithic kernels, providing a hypervisor-like interface.
FTL is compatible with Linux binaries and runs a Rust-based HTTP server as a Linux application.
FTL roadmap includes filesystem support, Node.js and Go support, and 64-bit Arm support by early 2027.
FTL's first release, v0.0.1, includes a simple Linux HTTP server, while v0.1.0 adds async Rust app support.
Why It Matters
If you're running lightweight containers, FTL could be a game-changer, offering the security of VMs and the flexibility of microkernels. FTL's userspace OS design allows building OS as a library, making it easier to add features and debug. The FTL kernel isolates containers better than monolithic kernels, providing a hypervisor-like interface based on lightweight hardware-based isolation.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.