binsquare

For the layman, I was looking for data on correctness.

I found `This is measured agreement, not a promise of universal bitwise equivalence` which seems to me a bit wishy washy

They're all bad, some are worse

We should have enough distaste for them all

I do not think we should trust this harnesses claims.

There's so much fluff because it doesn't care about what the user actually cares about.

So there's the usual structure of "it's not x it's actually y" signs.

What are you trying to do?

Docker shares the host kernel + networking stack, so container traffic goes through the host's iptables. So if you're running into some weirdness because of that, happy to help if you can share your setup details.

disclosure: dealt with container weirdness for last 5 years, nothing to sell.

smolvm has better bootup time (<200ms), secrets handling, and egress control compared to lima. Among other things like native branching/forking of the vm itself.

As for the rug pull concern, I'm committed to open source with 2 pieces of evidence.

1. oss license 2. Business model is accruing revenue from offering hosted service + inbound due to the open source project. The business model + open source is aligned.

disclaimer: maintainer of smol machines

Easily at scale

Size is not a good indicator for content quality

I've been personally using this and it's greatly improved testing and finding edge cases

I tried this because I started hitting the GitHub actions limit for my private registries and found my 5yr old hardware is easily 2x faster than whatever hardware I was paying GitHub for.

From the perspective of user empathy, wsl seems to be designed for that use case. but the implementation/defaults can be improved

Lot of the WSL2 lag is not the VM itself, it's the 9P file sharing and interop.

I found that seems like anything under /mnt/c goes through 9P

Cert pinning: not a problem. we don't decrypt traffic, we just pass it through. The only exception is hosts you give a credential to, since we have to insert the key.

Memorized IP: doesn't work, the vm can only connect to an IP if it came from a DNS lookup of an allowed name. Any other IP is blocked.

A bit of "shared responsibility" philosophy kicking through but I try to have good defaults