Konubinix' opinionated web of thoughts

Unikernel

Fleeting

Unikernel - Wikipedia

A unikernel is a specialised, single address space machine image constructed by using library operating systems.[1][2] A developer selects, from a modular stack, the minimal set of libraries which correspond to the OS constructs required for the application to run. These libraries are then compiled with the application and configuration code to build sealed, fixed-purpose images (unikernels) which run directly on a hypervisor or hardware without an intervening OS such as Linux or Windows.

https://en.wikipedia.org/wiki/Unikernel

By reducing the amount of code deployed, unikernels necessarily reduce the likely attack surface and therefore have improved security properties

https://en.wikipedia.org/wiki/Unikernel

Notes pointant ici