KVM
No written verdict yet. Here is what commenters said.
Why people recommend it
“addition of KVM! I remember when this was not a given, in the Xen days”
“I prefer a lot more security for a bit less flexibility.”
Show 3 more
“don't forget to enable KVM for performance”
““vmm” is a toy compared to kvm/libvirt.”
“I use limactl with qemu and kvm”
Caveats and dissent
“Unfortunately even your solution isn't immune to vulnerabilities, as kvm can be leveraged to gain access to the host”
“it was KVM that turned out to have the worst bugs”
Show 2 more
“you don't touch hardware virtualization with a 10 foot pole”
“Now everybody switched to kvm with none. Only speed matters, security not at all.”
Often compared with
Who recommends it in their own words
Threads where it came up
- Revealing the details of how OpenAI agents hacked Hugging Face 1 mention
- Show HN: MicroVM daemon, deploy any Docker image 1 mention
- VMs won't contain cyber-capable agents 1 mention
- Linux 7.2 Released 1 mention
- Responding to the next frontier of critical cyber capabilities 1 mention
- Humans missed 1 in 3 threats approving AI agent commands across 40k game runs 1 mention
Data: kvm.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 21
“we use KVM, so, I just edit the VM description and remove the NIC from it”
“Unfortunately even your solution isn't immune to vulnerabilities, as kvm can be leveraged to gain access to the host”
“it was KVM that turned out to have the worst bugs”
“addition of KVM! I remember when this was not a given, in the Xen days”
“moving the whole dev environment (editors, agents, containers) inside a QEMU/KVM VM”
“you don't touch hardware virtualization with a 10 foot pole”
“Now everybody switched to kvm with none. Only speed matters, security not at all.”
“This one is really not good as it is the first KVM guest-to-host exploit working on both AMD and Intel.”
“I prefer a lot more security for a bit less flexibility.”
“I use KVM (with virt-manager) extensively”
Which other approach to security do you consider reliable? Through correctness? Through obscurity? https://blog.invisiblethings.org/2008/09/02/three-approaches-to-computer-security.html
“I can't imagine its been tested as thoroughly as KVM”
“don't forget to enable KVM for performance”
““vmm” is a toy compared to kvm/libvirt.”
“I use limactl with qemu and kvm”
“I use KVM”
“FreeBSD VM via KVM and it seems to work well”
“A kvm hypervisor is not perfect”
“Thank you! Yes, KVM.”
“Intel's GPU SR-IOV already works with KVM on Linux!”
“I tried to port it to KVM”