ZeroVM is a secure execution environment for untrusted code in multi-tenant cloud. It's lightweight, fast, horizontally scalable, and can run arbitrary applications inside a datastore. More info about this open source project is available at http://zerovm.org
21. what • run isolated processes, securely!
• execution environment
• run isolated apps, conveniently !
• infrastructure manager
isolation • NaCL • Linux namespacing (similar to LXC)
main uses • compute intensive operations!
• run arbitrary code within datastore!
• sandboxing
• devops!
• deployment!
• testing
strengths • executables run the same every time!
• 5 ms spinup!
• fine-grained (ms) metering!
• embeddable!
• multi-tenant!
• massive horizontal scaling!
• easy to debug!
• no kernel access!
• true isolation
• server templates run the same every time!
• portability!
• mature!
• large community!
• lots of templates & plugins available
weaknesses • X86 64 only!
• bleeding edge!
• no plugins (yet)!
• executables must be cross-compiled &
single-threaded
• shares kernel & other resources!
• exposes even more thanVMs
23. Image Credits
• "Ketchup" designed byTom Glass, Jr.
from the thenounproject.com!
• "Infinite Box" photo by rumo_der_wolperdinger,
on Flickr!
• "Pink Balloon" photo by
Alan, on Flickr!
• "Carroll House Shipping Container Home"
photo by Inhabit Blog, on Flickr!
• "10,000 Shipping Containers Lost At Sea Each
Year" photo by PaulTownsend, on Flickr!
• "A-salt-ed!" by JD Hancock, on Flickr!
• "Eggs" photo by Pietro Izzo, on Flickr!
• Chromium logo by Logonoid!
• "The dark side in a whole new light: Evil Star
Wars Stormtrooper photographed in tender
scenes with young son" by Kristina
Alexanderson, in the Daily Mail!
• "debug version 2" photo by Franz & P, on Flickr
24. Resource Credits
• "Zerovm background" by Prosunjit
Biswas http://www.slideshare.net/
prosunjit/zerovm-background!
• "Docker & Containerization:
"Milliseconds Matter" by Ben Golub
http://cloudcomputing.sys-con.com/
node/3073584
• ZeroVM documentation
http://zerovm.org & http://
docs.zerovm.org/!
• "Cluster-wide Java/Scala application
deployments with Docker, Chef and
Amazon OpsWorks" by Adam Warski
http://www.warski.org/blog/2014/06/
cluster-wide-javascala-application-
deployments-with-docker-chef-and-
amazon-opsworks/