[pjmlp]

The Mirage folks didn't discover anything new in that regard.

It is how the safe OS from Burroughs, DEC, Xerox Parc, ETHZ and many others used to work.

Those OSes were written in strong typed systems programming languages, the whole stack.

Part of their security was based on the language type system.

[bcg1]

Fair enough! I definitely wasn't trying to suggest that is a completely new feature, nor that it is the only feature of Mirage OS ... really was just trying to make the point that there is more to the unikernel story than just figuring out whether it is better or worse for running my buggy crud application than some other virtualization technique. Thank you for the info though, I will have to read up on those things you mentioned.

[pjmlp]

You can find some links to those systems here

https://news.ycombinator.com/item?id=11856479