- Kernel hangs when bringing online additional cpus--no working SMP
- PV drivers for net and disk needed. Probably easy to take from NetBSD
- System needs testing for stability
Basically he thinks any hypervisor that isn't OpenBSD is not secure.
"x86 virtualization is about basically placing another nearly full kernel, full of new bugs, on top of a nasty x86 architecture which barely has correct page protection. Then running your operating system on the other side of this brand new pile of shit." http://marc.info/?l=openbsd-misc&m=119318909016582
Comments
Indeed. Why not?
This March 2015 post lists some known work items, http://www.joelroberts.org/openbsd/
An old (2012?) comparison of 4 BSDs on Xen and KVM: https://gmplib.org/~tege/virt.htmlFrom the link above comparing BSDs on Xen:
"OpenBSD probably works poorly by design, since its lead developer despises virtualisation."
I have seen this before. Can someone summarise the reasons why Theo de Raadt hates virtualisation?
Basically he thinks any hypervisor that isn't OpenBSD is not secure.
"x86 virtualization is about basically placing another nearly full kernel, full of new bugs, on top of a nasty x86 architecture which barely has correct page protection. Then running your operating system on the other side of this brand new pile of shit." http://marc.info/?l=openbsd-misc&m=119318909016582
(I see justinsaccount already posted this below.)
That's quite true, except that even OpenBSD is not _necessarily_ secure as a hypervisor.
I believe that Xen SMP hang was fixed in 5.8:
http://comments.gmane.org/gmane.os.openbsd.cvs/143877