# virtualization Virtualization is the creation of software-based abstractions of physical computing resources, enabling them to be partitioned, pooled, and shared across isolated environments such as virtual machines and containers. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## First VMmark 4.1 Power-Performance and VMware Cloud Foundation 9.1 Results DevFeed: [First VMmark 4.1 Power-Performance and VMware Cloud Foundation 9.1 Results]() Original publisher: [Read original article]() Author: vmwareblogs Published: 2026-09-16T18:20:25Z Content type: release Language: en Sources: [VMware Blogs]() Topics: [vcf 9.1](), [benchmarking](), [Benchmark](), [virtualization](), [Hardware]() Tags: [benchmarking](), [benchmarks](), [cloud-infrastructure](), [dell](), [efficiency](), [home-page](), [performance](), [vcf-9-1](), [vmmark](), [vmware](), [vmware-cloud-foundation](), [vsphere](), [vsphere-9-1]() ### AI overview VMware reports Dell Technologies benchmark results using VMware Cloud Foundation 9.1 and VMmark 4.1. The article describes VMmark 4.1's power-performance measurement and reports higher performance and tile count for VCF 9.1 than VCF 5.2 in the tested environment. ### Source excerpt We're excited to announce two new VMmark results today from Dell Technologies: First VCF 9.1 Benchmarks: These are the first results using VMware Cloud Foundation (VCF) 9.1. VCF 9.1 maximizes hardware efficiency using a Next-Gen Topology-Aware CPU Scheduler that optimizes memory and cache locality for intensive enterprise workloads. A separate VCF 9.1 evaluation demonstrated a ... Continued The post First VMmark 4.1 Power-Performance and VMware Cloud Foundation 9.1 Results appeared first on VMware Blogs. ## TrueNAS Releases a Native Proxmox VE Plugin for Managing VM Storage DevFeed: [TrueNAS Releases a Native Proxmox VE Plugin for Managing VM Storage]() Original publisher: [Read original article]() Author: Brandon Lee Published: 2026-09-16T13:40:55Z Content type: article Language: en Sources: [Virtualization Howto]() Topics: [truenas](), [Proxmox](), [virtualization](), [NVMe]() Tags: [bug](), [home-lab](), [home-server](), [nvme](), [proxmox](), [release](), [testing](), [truenas](), [virtualization](), [zfs]() ### AI overview TrueNAS released an official Proxmox VE storage plugin that lets administrators provision and manage TrueNAS-backed VM disks through Proxmox workflows. The plugin supports iSCSI, NVMe over TCP, and OpenZFS snapshots, but the article describes it as an early-adopter release that is not yet recommended for production workloads. ### Source excerpt It really feels like Proxmox is on fire lately with announcements and momentum behind the solution. We just came off the heels of Proxmox announcing they were bringing on 24x7... The post TrueNAS Just Fixed One of Proxmox's Biggest Storage Headaches appeared first on Virtualization Howto. ## AMD Sends Out Linux Patches For Enabling SEV-TIO TDISP With PCIe 6.0 DevFeed: [AMD Sends Out Linux Patches For Enabling SEV-TIO TDISP With PCIe 6.0]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-16T13:02:52Z Content type: news Language: en Sources: [Phoronix]() Topics: [Linux Kernel](), [pcie](), [trusted-execution-environment](), [Confidential Computing](), [virtualization](), [Security](), [Encryption](), [MERN]() Tags: [amd](), [arm](), [attestation](), [confidential-computing](), [cpu](), [desktop-linux](), [encryption](), [intel](), [kernel](), [linux](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-kernel](), [linux-performance](), [linux-server-benchmarks](), [open-source-graphics](), [pcie](), [phoronix](), [phoronix-test-suite](), [processors](), [risc-v](), [security](), [ubuntu-benchmarks](), [ubuntu-hardware]() ### AI overview AMD submitted 17 Linux kernel patches to enable SEV-TIO TDISP for PCIe 6.0 and newer. The work is intended to secure direct I/O device assignment for confidential-computing environments, including AMD Secure Encrypted Virtualization guest VMs, and includes a common TEE Security Manager developed with Intel, Arm, and RISC-V. ### Source excerpt The newest Linux kernel patches out of AMD for enhancing the upstream support with the new AMD EPYC 9006 "Venice" processors is for enabling SEV-TIO TDISP that is supported with PCI Express 6.0 and beyond... ## I Turned My Proxmox Server Into a NAS Without Installing TrueNAS DevFeed: [I Turned My Proxmox Server Into a NAS Without Installing TrueNAS]() Original publisher: [Read original article]() Author: Brandon Lee Published: 2026-09-10T12:46:18Z Content type: article Language: en Sources: [Virtualization Howto]() Topics: [Proxmox](), [Homelab](), [virtualization](), [hosting](), [Linux](), [Debian]() Tags: [ceph](), [debian](), [home-lab](), [home-server](), [hosting](), [linux](), [nas](), [proxmox](), [self-hosted](), [self-hosting](), [server](), [storage](), [virtualization]() ### AI overview The article presents ANAS, a project that adds native storage-management panels to the existing Proxmox VE web interface. It aims to let Proxmox manage storage using the underlying Debian/Linux capabilities without installing TrueNAS or introducing a separate management interface. ### Source excerpt Proxmox is really good with all types of storage and I have used it as a dedicated NAS appliance many times. I have used dedicated NAS devices. I have also... The post I Turned My Proxmox Server Into a NAS Without Installing TrueNAS appeared first on Virtualization Howto. ## QNAP TVS-hx77AX Brings NFS over RDMA and U.2 NVMe to Desktop ZFS NAS DevFeed: [QNAP TVS-hx77AX Brings NFS over RDMA and U.2 NVMe to Desktop ZFS NAS]() Original publisher: [Read original article]() Author: Lyle Smith Published: 2026-09-09T17:18:09Z Content type: news Language: en Sources: [StorageReview.com]() Topics: [systems](), [networking](), [virtualization](), [cpu](), [Network](), [GPU](), [Artificial Intelligence]() Tags: [10gbase-t](), [2-5gbe](), [amd](), [cpu](), [enterprise](), [gpu](), [medium-nas](), [memory](), [nas](), [networking](), [nvme](), [pcie](), [qnap](), [virtualization]() ### AI overview QNAP introduced the TVS-hx77AX series of desktop ZFS NAS systems, combining AMD Ryzen 7000 processors, DDR5 memory, U.2 NVMe storage, and NFS over RDMA. The 16-, 12-, and 8-bay models target video collaboration, virtualization, and small-scale AI workloads. ### Source excerpt QNAP has introduced the TVS-hx77AX series, a new line of desktop ZFS NAS systems combining AMD Ryzen 7000 series processors with DDR5 memory, U.2 NVMe storage, and NFS over RDMA support. The family includes the 16-bay TVS-h1677AX, 12-bay TVS-h1277AX, and 8-bay TVS-h877AX, and QNAP is aiming all three at video collaboration, virtualization, and small-scale AI The post QNAP TVS-hx77AX Brings NFS over RDMA and U.2 NVMe to Desktop ZFS NAS appeared first on StorageReview.com. ## Using Proxmox Resource Mappings for GPU Passthrough Across Cluster Nodes DevFeed: [Using Proxmox Resource Mappings for GPU Passthrough Across Cluster Nodes]() Original publisher: [Read original article]() Author: Brandon Lee Published: 2026-09-09T12:43:14Z Content type: tutorial Language: en Sources: [Virtualization Howto]() Topics: [Proxmox](), [Homelab](), [virtualization](), [configuration](), [Hardware]() Tags: [configuration](), [hardware](), [home-lab](), [home-server](), [proxmox](), [virtualization]() ### AI overview This tutorial explains how Proxmox Resource Mappings can represent passthrough hardware as logical resources across cluster nodes. It contrasts this approach with assigning a VM a fixed PCI address, which may fail when the VM moves to a node where the device has a different address. ### Source excerpt Many home labbers are starting to experiment with AI in the home lab and are using things like GPU passthrough on their Proxmox hosts. But passthrough is not just something... The post I Changed How I Do GPU Passthrough in Proxmox After Finding This Feature appeared first on Virtualization Howto. ## I Was Running Redundant VMs on the Same Proxmox Host Without Realizing It DevFeed: [I Was Running Redundant VMs on the Same Proxmox Host Without Realizing It]() Original publisher: [Read original article]() Author: Brandon Lee Published: 2026-09-08T12:19:53Z Content type: opinion Language: en Sources: [Virtualization Howto]() Topics: [Proxmox](), [Homelab](), [virtualization](), [systems]() Tags: [architecture](), [home-lab](), [proxmox](), [server](), [servers](), [systems](), [virtualization]() ### AI overview The article describes discovering that two supposedly redundant VMs were running on the same Proxmox host. It explains how shared failure domains can make apparently resilient home-lab architectures fail together and recommends auditing workload placement across hosts and dependencies. ### Source excerpt If you have spent a lot of time over the years building redundancy into your home lab, you probably have looked at many of the same layers that I have.... The post I Was Running Redundant VMs on the Same Proxmox Host Without Realizing It appeared first on Virtualization Howto. ## Leaving VMware Just Got Harder After Broadcom Pulled VDDK Downloads DevFeed: [Leaving VMware Just Got Harder After Broadcom Pulled VDDK Downloads]() Original publisher: [Read original article]() Author: Brandon Lee Published: 2026-09-07T12:07:37Z Content type: news Language: en Sources: [Virtualization Howto]() Topics: [virtualization](), [migration](), [Azure](), [SDKs](), [Microsoft]() Tags: [azure](), [developer](), [home-lab](), [home-server](), [microsoft](), [migration](), [proxmox](), [tool](), [virtualization](), [vmware]() ### AI overview Broadcom has removed public download access to VMware's Virtual Disk Development Kit (VDDK), creating a potential obstacle for customers migrating away from VMware. The library is used by migration tools including Microsoft Azure Migrate, Red Hat's Migration Toolkit, Nutanix Move, VMware-to-KVM products, virt-v2v, and nbdkit. The article notes that affected links return errors and that no formal transition notice, deprecation announcement, or replacement has been identified. ### Source excerpt Just when we thought that Broadcom wouldn't be able to slow down customers moving off of vSphere to another platform. They may just now have done something that will have... The post Leaving VMware Just Got Harder After Broadcom Pulled VDDK Downloads appeared first on Virtualization Howto. ## 7 Weekend Projects That Make Your Home Lab Less Dependent on You DevFeed: [7 Weekend Projects That Make Your Home Lab Less Dependent on You]() Original publisher: [Read original article]() Author: Brandon Lee Published: 2026-09-06T12:32:10Z Content type: article Language: en Sources: [Virtualization Howto]() Topics: [Homelab](), [Automation](), [Git](), [virtualization]() Tags: [architecture](), [automation](), [documentation](), [git](), [home-lab](), [home-server](), [virtualization]() ### AI overview The article presents weekend projects for making a home lab more understandable, recoverable, resilient, and predictable when its owner is unavailable. The supplied text covers documenting the lab and moving configurations into Git, including recording hosts, IP addresses, VLANs, and architecture. ### Source excerpt I have been pretty focused on automation in the home lab. But there is also mindset changes I needed to make to keep from having to baby sit my lab... The post 7 Weekend Projects That Make Your Home Lab Less Dependent on You appeared first on Virtualization Howto. ## Proxmox Enterprise Support Goes 24/7 on October 19; North American Subsidiary Opens in Kingston DevFeed: [Proxmox Enterprise Support Goes 24/7 on October 19; North American Subsidiary Opens in Kingston]() Original publisher: [Read original article]() Author: Lyle Smith Published: 2026-09-03T14:57:12Z Content type: news Language: en Sources: [StorageReview.com]() Topics: [Proxmox](), [virtualization](), [Cloud]() Tags: [2026](), [cloud](), [customers](), [enterprise](), [outages](), [production](), [proxmox](), [software](), [ssh](), [support]() ### AI overview Proxmox will begin offering 24/7 global enterprise support on October 19, 2026, covering Proxmox Virtual Environment, Proxmox Backup Server, and Proxmox Datacenter Manager. It is also establishing Proxmox North America Inc. in Kingston, Ontario, to support customers and partners in the United States and Canada. Premium subscribers will receive around-the-clock coverage, while Standard subscribers are scheduled for a later Q4 2026 onboarding window. ### Source excerpt Proxmox is making a major expansion to its enterprise operations, moving to 24/7 global support beginning October 19, 2026, while establishing a new North American subsidiary in Kingston, Ontario. The new support covers Proxmox Virtual Environment, Proxmox Backup Server, and Proxmox Datacenter Manager, giving enterprise customers direct access to Proxmox engineers at any time of The post Proxmox Enterprise Support Goes 24/7 on October 19; North American Subsidiary Opens in Kingston appeared first on StorageReview.com. ## Xen on RISC-V just ran on real hardware! DevFeed: [Xen on RISC-V just ran on real hardware!]() Original publisher: [Read original article]() Author: Baptiste Le Duc Published: 2026-09-03T08:00:27Z Content type: article Language: en Sources: [XCP-ng Blog]() Topics: [RISC-V](), [virtualization](), [systems](), [ci](), [cpu](), [Emulator]() Tags: [ci](), [cpu](), [qemu](), [risc-v](), [systems](), [virtualization]() ### AI overview Xen now boots a guest domain on physical RISC-V hardware using a HiFive Premier P550. Supporting changes accommodate the board's pre-ratification hypervisor extension and add reproducible hardware-based CI that boots Xen and a Linux guest. ### Source excerpt Xen now boots a guest domain on physical RISC-V hardware, not just in QEMU. The board we used ships a CPU designed before the hypervisor extension was ratified, which turned out to be the whole challenge. ## Networking Aspects of Running VMs in Containers DevFeed: [Networking Aspects of Running VMs in Containers]() Original publisher: [Read original article]() Published: 2026-09-02T05:44:00Z Content type: article Language: en Sources: [ipSpace.net blog]() Topics: [Containers](), [virtualization](), [networking](), [Linux](), [Orchestration]() Tags: [bridge](), [containers](), [docker](), [ethernet](), [linux](), [netlab](), [networking](), [podman](), [qemu](), [virtual-machines](), [virtualization]() ### AI overview The article explains how vrnetlab and a containerlab fork package virtual machines, especially network devices, as containers so container orchestration can provision network topologies. It focuses on connecting QEMU virtual network interfaces, Linux tap interfaces, bridges, and container veth pairs, including why data-plane and management interfaces require different handling. ### Source excerpt The vrnetlab project and its containerlab fork implement a wonderful idea: let's package virtual machines (primarily network devices that cannot be containerized) as containers to use reliable orchestration tools like containerlab to provision network topologies. That approach might have a few drawbacks (depending on how the container images are built), but the obvious elephant in the room is: how do you make the virtual network plumbing work? Read more ... ## AWS Launches Graviton5-Based EC2 R9g and R9gd Memory-Optimized Instances DevFeed: [AWS Launches Graviton5-Based EC2 R9g and R9gd Memory-Optimized Instances]() Original publisher: [Read original article]() Author: Harold Fritts Published: 2026-09-01T18:42:59Z Content type: news Language: en Sources: [StorageReview.com]() Topics: [Amazon Web Services](), [Amazon EC2](), [Arm](), [cpu](), [Hardware](), [Nitro System](), [virtualization](), [Nitro Isolation Engine](), [Database](), [Caching](), [Kubernetes](), [Formal verification]() Tags: [amazon-ec2](), [amazon-eks](), [arm](), [aws](), [c-plus-plus](), [caching](), [cloud](), [database](), [docker](), [enterprise](), [formal-verification](), [go](), [hardware](), [java](), [microservices](), [nitro-isolation-engine](), [nitro-system](), [node-js](), [nvme](), [processors](), [python](), [time]() ### AI overview AWS has generally released the Amazon EC2 R9g and R9gd instances, powered by AWS Graviton5 processors. These Arm-based, memory-optimized instances offer higher per-vCPU performance, faster memory, larger cache capacity, and increased networking and Amazon EBS bandwidth for database, caching, analytics, container, and microservices workloads. R9gd adds local NVMe SSD storage for low-latency local capacity. Both families use the AWS Nitro System and Nitro Isolation Engine, with AWS citing formal verification for the isolation properties. ### Source excerpt AWS has made its Amazon EC2 R9g and R9gd instances generally available, introducing memory-optimized systems powered by AWS Graviton5 processors. The new Arm-based instances target database, caching, analytics, container, and microservices workloads that require high memory bandwidth and improved per-vCPU performance. Compared with Graviton4-based R8g instances, AWS states that R9g can deliver up to 25% The post AWS Launches Graviton5-Based EC2 R9g and R9gd Memory-Optimized Instances appeared first on StorageReview.com. ## Patching at Fleet Scale, Twice: How DigitalOcean Closed Januscape and the AMD Safe RET Issue Without Customer Impact DevFeed: [Patching at Fleet Scale, Twice: How DigitalOcean Closed Januscape and the AMD Safe RET Issue Without Customer Impact]() Original publisher: [Read original article]() Author: Tim Lisko Published: 2026-08-24T21:25:19Z Content type: article Language: en Sources: [DigitalOcean]() Topics: [Digital Ocean](), [virtualization](), [vulnerability](), [Cloud](), [cloud security](), [Security](), [Exploit](), [Kernel](), [Linux]() Tags: [cloud](), [cloud-computing](), [cve](), [digitalocean](), [engineering](), [exploit](), [infrastructure](), [kernel](), [linux](), [security](), [trust-security](), [update](), [virtualization](), [vulnerability]() ### AI overview DigitalOcean describes how it responded to two serious vulnerabilities affecting its hypervisor fleet: Januscape, a KVM nested-virtualization flaw, was addressed with fleet-wide livepatching, while a separate AMD hypervisor vulnerability required kernel updates and reboots across roughly 1,600 hypervisors. The article reports zero confirmed customer-facing impact. ### Source excerpt Setting the stakes In early July, security researcher Hyunwoo Kim discovered Januscape (CVE-2026-53359), a flaw in KVM's handling of nested virtualization that could allow a malicious guest to escape into the host hypervisor. It was disclosed publicly on July 6 via the Linux oss-security mailing list. For a cloud provider, a guest-to-host escape is the most serious class of vulnerability there is: the hypervisor is the boundary that keeps each customer's workloads isolated from each other, and from our infrastructure itself. We responded, patched the entire fleet in eight days with zero confirmed customer-facing impact, and drafted a post about how we did it. Then, before we could hit publish, it happened again. In late July we learned of a second and unrelated vulnerability affecting our entire AMD hypervisor fleet, that could not be livepatched. Roughly 1,600 hypervisors needed a kernel update and a reboot. So now this story is about two responses, three weeks apart. The first built the muscle. The second proved it was repeatable, at a larger scale, and on a harder constraint. Here's how both played out, and why two of the most serious vulnerability classes in cloud computing ended up feeling like just another couple of weeks for us. Act one: Januscape The fast path: fleet-wide livepatching Our response kicked off the same night the vulnerability was disclosed. When public exploit code surfaced late in the evening of July 6, the Kernel Engineering team was paged and dug in immediately. Engineers reproduced the exploit in an isolated environment, confirmed which kernel lines were affected, and built the first working livepatch before 1 AM, roughly 45 minutes after answering the page. Livepatching lets us fix a running kernel in place, with no reboot, no migration, and no observed disruption to the customer. A few hours later, patches for the kernel versions (6.1 and 6.12) that run the majority of our hypervisor fleet were ready to ship. For the remainder, we had to ## AAOS SDV - Secure by Design DevFeed: [AAOS SDV - Secure by Design]() Original publisher: [Read original article]() Author: Android Developers (noreply@blogger.com) Published: 2026-08-24T16:00:31Z Content type: article Language: en Sources: [Android Developers Blog]() Topics: [Android](), [Security](), [virtualization](), [virtual machines](), [SELinux](), [POSIX](), [Processes](), [Google]() Tags: [android](), [android-security](), [article](), [google](), [posix](), [process](), [security](), [selinux](), [virtual-machines](), [virtualization]() ### AI overview This article explains the security design of Android Automotive Operating System for Software Defined Vehicle (AAOS SDV). It describes virtualization for domain isolation, UID-based application and service sandboxing, POSIX capabilities, SELinux deny-by-default enforcement, and Android's vulnerability management and disclosure processes. ### Source excerpt Posted by Markus Vill, Software Engineer, Sean Keys, Security Engineer, and Istvan Nador, Software Engineer, Android Auto At Google, we believe our products should be secure by design, which is why we built the Android Automotive Operating System for Software Defined Vehicle (AAOS SDV) on existing, market-proven platforms, leveraging virtualization technologies like Cuttlefish. While our release announcements focused on the features, this blog post outlines some of the security concepts. Foundation: Domain IsolationVirtualization to isolate co-hosted instances The current trend of consolidating Electronic Control Units (ECUs) into a single chip reduces isolation by running multiple domains side-by-side. While AAOS SDV instances provide internal isolation mechanisms, it is often preferable to run logical domains independently. For instance, a cluster and an infotainment system have distinct requirements. We use virtual machines to run multiple instances in parallel, ensuring that sharing remains explicit and isolation is the default behavior. Inherited Android Security AAOS SDV evolved from Microdroid, a minimalistic Android version optimized for privacy virtual machines (pVM). This lineage provides Android platform engineers with established security features they already know. Process Isolation & Deny by Default AAOS SDV follows Android's User ID (UID)-based isolation model to set up a sandbox for each application. Each service runs in a dedicated process with a unique UID to manage access rights, data directories, and other restrictions. We employ Portable Operating System Interface (POSIX) capabilities to strictly limit operations and pair this with Security-Enhanced Linux (SELinux) to enforce a "deny-by-default" posture. This approach restricts each service to the absolute minimum required, meaning missing configurations block access rather than creating an over-permissive system. We apply this same strategy to our communication permission system, as explained l ## AAOS SDV - Secure by Design DevFeed: [AAOS SDV - Secure by Design]() Original publisher: [Read original article]() Author: Android Developers (noreply@blogger.com) Published: 2026-08-24T16:00:31Z Content type: article Language: en Sources: [Android Developers Blog](), [Android Developers Blog]() Topics: [Android](), [Security](), [SELinux](), [virtualization](), [vulnerability management](), [Process](), [Resilience](), [Google]() Tags: [android](), [android-security](), [article](), [automotive](), [blog](), [deep-dive](), [google](), [process](), [resilience](), [security](), [selinux](), [virtualization](), [vulnerabilities](), [vulnerability-management]() ### AI overview AAOS SDV is presented as a secure-by-design platform for software-defined vehicles. The article explains how virtualization isolates co-hosted domains, while Android UID-based process sandboxes, POSIX capabilities, and SELinux enforce least privilege and deny-by-default access. It also describes vulnerability response, penetration testing, security audits, and architectural reviews. ### Source excerpt Posted by Markus Vill, Software Engineer, Sean Keys, Security Engineer, and Istvan Nador, Software Engineer, Android Auto At Google, we believe our products should be secure by design, which is why we built the Android Automotive Operating System for Software Defined Vehicle (AAOS SDV) on existing, market-proven platforms, leveraging virtualization technologies like Cuttlefish. While our release announcements focused on the features, this blog post outlines some of the security concepts. Foundation: Domain IsolationVirtualization to isolate co-hosted instances The current trend of consolidating Electronic Control Units (ECUs) into a single chip reduces isolation by running multiple domains side-by-side. While AAOS SDV instances provide internal isolation mechanisms, it is often preferable to run logical domains independently. For instance, a cluster and an infotainment system have distinct requirements. We use virtual machines to run multiple instances in parallel, ensuring that sharing remains explicit and isolation is the default behavior. Inherited Android Security AAOS SDV evolved from Microdroid, a minimalistic Android version optimized for privacy virtual machines (pVM). This lineage provides Android platform engineers with established security features they already know. Process Isolation & Deny by Default AAOS SDV follows Android's User ID (UID)-based isolation model to set up a sandbox for each application. Each service runs in a dedicated process with a unique UID to manage access rights, data directories, and other restrictions. We employ Portable Operating System Interface (POSIX) capabilities to strictly limit operations and pair this with Security-Enhanced Linux (SELinux) to enforce a "deny-by-default" posture. This approach restricts each service to the absolute minimum required, meaning missing configurations block access rather than creating an over-permissive system. We apply this same strategy to our communication permission system, as explained l ## The post-VMware playbook: what to move first, what to leave for last DevFeed: [The post-VMware playbook: what to move first, what to leave for last]() Original publisher: [Read original article]() Author: manuel@giantswarm.io (Manuel Gawert) Published: 2026-08-18T09:25:47Z Content type: tutorial Language: en Sources: [Giant Swarm Blog]() Topics: [migration](), [Proxmox](), [virtualization](), [Amazon Web Services](), [Azure]() Tags: [cost](), [cost-optimization-in-kubernetes](), [migration](), [open-source](), [platform-engineering](), [proxmox](), [time](), [virtualization]() ### AI overview This article presents a migration playbook for teams evaluating a move away from VMware. It focuses on sequencing workloads, deciding among Proxmox, Azure, and AWS, and accounting for workload fit, risk, time, and cost. It emphasizes making the infrastructure decision before moving workloads because migrations can stall when that decision is unresolved. ### Source excerpt The post-VMware playbook: what to move first, what to leave for last, and what each option costs in risk, time, and money. (Giant Swarm) ## We rebuilt the Linux microVM stack on Apple Silicon DevFeed: [We rebuilt the Linux microVM stack on Apple Silicon]() Original publisher: [Read original article]() Author: Ivan Cernja Published: 2026-08-18T00:00:00Z Content type: article Language: en Sources: [Encore Updates]() Topics: [Firecracker](), [virtualization](), [macOS](), [Linux](), [Dockerfile](), [Go Language]() Tags: [docker](), [firecracker](), [go](), [linux](), [macos](), [virtualization]() ### AI overview Encore rebuilt its Linux microVM development stack to work on Apple Silicon. The article describes crackling, an API that uses Firecracker on Linux and Apple's hypervisor on macOS, along with the tooling needed to run the same build system on developer laptops and in production. ### Source excerpt Maybe we should have just moved everyone to Linux. ## Test Days for Fedora 45: Help Us Test the Big Changes DevFeed: [Test Days for Fedora 45: Help Us Test the Big Changes]() Original publisher: [Read original article]() Author: Petr Sklenar Published: 2026-08-14T17:22:24Z Content type: article Language: en Sources: [Fedora Magazine]() Topics: [Fedora](), [boot](), [ci](), [virtualization](), [Internationalization (i18n)](), [Confidential Computing](), [dnf](), [TLS (Transport Layer Security)](), [Matrix]() Tags: [article](), [community](), [developers](), [dnf](), [events](), [fedora-project-community](), [graphics](), [kernel](), [new-in-fedora](), [python](), [qa](), [test-day](), [testing](), [tls](), [virtualization]() ### AI overview This article invites the Fedora community to test Fedora 45 system-level changes on real hardware and virtual machines. It highlights testing for GNOME 51, RPM 6.1, OpenSSL 4.0, rebuilt boot and live media, kmscon, Python 3.15, GRUB EFI for Confidential Computing, and internationalization changes. Community testing is intended to find regressions that automated tests may miss and to support reproducible bug reports. ### Source excerpt Fedora 45 has several system-level changes that need testing on real hardware. The first test day up is GNOME 51, starting on 17 August, with more events planned for RPM 6.1, installation media and others. You can participate with a VM for most tests; some hardware-specific testing is more useful on a real machine. Details [...] ## QEMU version 11.1.0 released DevFeed: [QEMU version 11.1.0 released]() Original publisher: [Read original article]() Published: 2026-08-11T23:56:00Z Content type: release Language: en Sources: [QEMU]() Topics: [qemu](), [virtualization](), [version](), [Availability](), [Arm](), [cpu](), [RISC-V](), [virtio]() Tags: [announce](), [arm](), [availability](), [bugs](), [cache](), [changelog](), [ci](), [cpu](), [documentation](), [gui](), [qemu](), [qemu-11-1](), [release](), [releases](), [risc-v](), [testing](), [version](), [virtio](), [virtualization]() ### AI overview QEMU 11.1.0 has been released with more than 3,200 commits from 285 authors. The release adds or improves emulation, virtualization, GUI, architecture, firmware, and accelerator support, including UFS features, ARM and RISC-V capabilities, nested virtualization, and new machine and board support. ### Source excerpt We'd like to announce the availability of the QEMU 11.1.0 release. This release contains 3200+ commits from 285 authors. ## Containing Locally Running AI Agents with Layered Security Controls DevFeed: [Containing Locally Running AI Agents with Layered Security Controls]() Original publisher: [Read original article]() Author: Spencer Reeves Published: 2026-08-10T18:00:00Z Content type: tutorial Language: en Sources: [Apartment 304]() Topics: [Artificial Intelligence](), [Security](), [Containers](), [virtualization](), [macOS](), [npm]() Tags: [agent](), [ai-agents](), [apartment-304](), [apple](), [credentials](), [custom-software-solutions](), [devops](), [devops-engineer](), [macos](), [networking](), [npm](), [open-source](), [sandboxing](), [security](), [software-architecture](), [software-development](), [software-engineer]() ### AI overview This article presents a layered security approach for running AI agents locally. It focuses on sandboxing the agent, restricting internet access, and protecting secrets and environment files, with container isolation as the foundation. ### Source excerpt Running an agent locally gives it a foothold on your machine -- here's how we keep it contained. ## 2.5x Faster x86\_64 Linux Builds on macOS with Rosetta DevFeed: [2.5x Faster x86\_64 Linux Builds on macOS with Rosetta]() Original publisher: [Read original article]() Author: Jacek Galowicz Published: 2026-08-10T00:00:00Z Content type: article Language: en Sources: [Nixcademy Blog]() Topics: [macOS](), [Nix](), [virtualization](), [qemu](), [x86](), [Linux]() Tags: [apple-silicon](), [install](), [macos](), [qemu](), [rosetta](), [run](), [virtualization](), [x86-64]() ### AI overview The article explains a new nix-darwin Linux builder backend that uses Apple's Virtualization.framework and exposes Rosetta to guest VMs. On Apple Silicon Macs, it supports x86_64 Linux builds and is reported to be roughly 2.5 times faster than QEMU-based emulation. ### Source excerpt Build x86_64 Linux packages 2.5x faster on your Apple Silicon Mac with the new Rosetta-based linux-builder, a drop-in replacement in nix-darwin. ## Xen 4.22: Strengthening Open Source Virtualization for Cloud, Embedded, and Automotive Systems DevFeed: [Xen 4.22: Strengthening Open Source Virtualization for Cloud, Embedded, and Automotive Systems]() Original publisher: [Read original article]() Author: Cody Zuschlag Published: 2026-08-05T15:18:36Z Content type: article Language: en Sources: [Blog - Xen Project]() Topics: [virtualization](), [Open Source](), [Cloud](), [Hardware](), [Scalability](), [Arm](), [RISC-V]() Tags: [arm](), [automotive](), [cloud](), [developers](), [embedded](), [hardware](), [improvements](), [lifecycle](), [maintenance](), [open-source](), [performance](), [platform](), [release](), [releases](), [risc-v](), [safety](), [security](), [standards](), [systems](), [virtualization](), [xen-4-22]() ### AI overview Xen 4.22 is presented as the latest Xen hypervisor release, adding modern hardware support, Arm virtualization improvements, continued RISC-V progress, and Xenstore scalability updates. The Xen Project also introduces a consistent five-year security support lifecycle for Xen 4.20 and later releases. ### Source excerpt Xen 4.22 adds modern hardware support, Arm improvements, continued RISC-V progress, Xenstore scalability updates, and a five-year security support lifecycle. ## The hyperscale blueprint: Why cloud giants prioritize VMs for Kubernetes over bare metal DevFeed: [The hyperscale blueprint: Why cloud giants prioritize VMs for Kubernetes over bare metal]() Original publisher: [Read original article]() Author: Jack Wallen Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [virtualization](), [Kubernetes](), [Containers](), [Scalability](), [Security](), [Amazon Web Services](), [Nitro System](), [Multi-tenancy]() Tags: [aws](), [containers](), [kubernetes](), [multi-tenancy](), [nitro-system](), [scalability](), [security](), [virtual-machines](), [virtualization]() ### AI overview Cloud providers generally run Kubernetes and other containerized workloads on virtual machines rather than bare metal because virtualization offers security, isolation, flexibility, scalability, and near-bare-metal performance. AWS Nitro and Firecracker help reduce virtualization overhead, while bare metal remains reserved for specialized performance or hardware-access requirements. ### Source excerpt Why do cloud giants use VMs for Kubernetes? Learn why AWS, Azure, and Google prioritize Virtual Machines for containerized workloads over bare metal, focusing on security and scalability. [Next page]()