unikernels

An article introducing unikernels written in OCaml, exploring how minimal VM images can be built for lightweight, specialized deployments.

作者结合与 Justin Cormack 的访谈，论证 unikernel 过去难用的问题已被 AI 模型权重化解，并认为传统多用户操作系统是设计负债，unikernel 能大幅缩小攻击面，让 AI 驱动的入侵无从下手。

This blog post explains how to enable reproducible deployments of MirageOS unikernels using Nix, integrating functional programming for safer and more efficient network applications like DNS servers.