{"guid":"ede8349a-c68a-4970-b01f-ca4a75e07b88","title":"QEMU on speed: microVMs in Proxmox","subtitle":"Geschwindigkeit, Sicherheit und ein Patch für Proxmox","slug":"froscon2026-3559-qemu_on_speed_microvms_in_proxmox","link":"https://programm.froscon.org/2026/events/3559.html","description":"Zwischen LXC-Containern und vollständigen QEMU-VMs klafft eine Lücke: Workloads die echte VM-Isolation brauchen, aber keine 8 Sekunden Bootzeit wollen. microVMs schließen diese Lücke – kein BIOS, kein PCI-Bus, Direct Kernel Boot in unter 200ms. Der Talk vergleicht QEMU microvm und Firecracker technisch und sicherheitstechnisch, und zeigt anhand eines minimalen Proxmox-Patches wie microVMs als dritte Virtualisierungsklasse in PVE landen. Mit Live-Demo.\n\nQEMU ist mächtig – und träge. Wer eine VM startet, bekommt SeaBIOS, PCI-Bus-Scan, emuliertes VGA und ein Dutzend Geräte die kein Workload je anfasst. Das Ergebnis: 6–10 Sekunden bis zum Login, auch wenn der Gast nur drei Prozesse braucht. microVMs sind die Aufputschmittel. Mit dem QEMU microvm machine type fliegt der gesamte Legacy-Stack raus: kein BIOS, kein PCI, kein Bootloader. Stattdessen Direct Kernel Boot und virtio über MMIO – der Kernel startet direkt in den Gast, unter 200ms, bei echter KVM-Isolation. Firecracker geht denselben Weg noch konsequenter: ~50.000 Zeilen Rust statt 1,5 Millionen Zeilen C, ein eingebauter jailer der den VMM-Prozess per seccomp und Namespaces einsperrt, und eine minimale Gerätelist die VENOM-Klasse-Exploits schlicht unmöglich macht. Wir schauen uns an wo QEMU microvm und Firecracker sich technisch unterscheiden – in Performance, Angriffsfläche und Isolation – und wann welcher Ansatz die richtige Wahl ist. Den Abschluss macht ein minimaler Proxmox-Patch der microVMs als vollwertige dritte Virtualisierungsklasse neben LXC und QEMU in PVE integriert – inklusive Web UI, Templates und Backup. Live-Demo auf echter Hardware: Stoppuhr läuft.\n\nLicensed to the public under http://creativecommons.org/licenses/by/4.0","original_language":"deu","persons":["Alexander Wirt"],"view_count":305,"promoted":false,"date":"2026-08-15T11:15:00.000+02:00","release_date":"2026-08-15T00:00:00.000+02:00","updated_at":"2026-08-21T17:00:04.728+02:00","tags":["3559","2026","froscon2026","System Administration","HS 8","froscon2026-deu","Day 1"],"length":2455,"duration":2455,"thumb_url":"https://static.media.ccc.de/media/events/froscon/2026/3559-ede8349a-c68a-4970-b01f-ca4a75e07b88.jpg","poster_url":"https://static.media.ccc.de/media/events/froscon/2026/3559-ede8349a-c68a-4970-b01f-ca4a75e07b88_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/froscon/2026/3559-ede8349a-c68a-4970-b01f-ca4a75e07b88.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/froscon/2026/3559-ede8349a-c68a-4970-b01f-ca4a75e07b88.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/froscon2026-3559-qemu_on_speed_microvms_in_proxmox","url":"https://api.media.ccc.de/public/events/ede8349a-c68a-4970-b01f-ca4a75e07b88","conference_title":"FrOSCon 2026","conference_url":"https://api.media.ccc.de/public/conferences/froscon2026","related":[],"recordings":[{"length":2455,"mime_type":"video/mp4","language":"deu","filename":"froscon2026-3559-deu-QEMU_on_speed_microVMs_in_Proxmox_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-08-16T13:37:49.677+02:00","label":"deu 1080p","size":198,"recording_url":"https://cdn.media.ccc.de/events/froscon/2026/h264-hd/froscon2026-3559-deu-QEMU_on_speed_microVMs_in_Proxmox_hd.mp4","url":"https://api.media.ccc.de/public/recordings/103478","event_url":"https://api.media.ccc.de/public/events/ede8349a-c68a-4970-b01f-ca4a75e07b88","conference_url":"https://api.media.ccc.de/public/conferences/froscon2026"},{"length":2455,"mime_type":"audio/mpeg","language":"deu","filename":"froscon2026-3559-deu-QEMU_on_speed_microVMs_in_Proxmox_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2026-08-16T13:46:40.641+02:00","label":"deu","size":38,"recording_url":"https://cdn.media.ccc.de/events/froscon/2026/mp3/froscon2026-3559-deu-QEMU_on_speed_microVMs_in_Proxmox_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/103479","event_url":"https://api.media.ccc.de/public/events/ede8349a-c68a-4970-b01f-ca4a75e07b88","conference_url":"https://api.media.ccc.de/public/conferences/froscon2026"},{"length":2455,"mime_type":"audio/opus","language":"deu","filename":"froscon2026-3559-deu-QEMU_on_speed_microVMs_in_Proxmox_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2026-08-16T13:46:36.470+02:00","label":"deu","size":25,"recording_url":"https://cdn.media.ccc.de/events/froscon/2026/opus/froscon2026-3559-deu-QEMU_on_speed_microVMs_in_Proxmox_opus.opus","url":"https://api.media.ccc.de/public/recordings/103508","event_url":"https://api.media.ccc.de/public/events/ede8349a-c68a-4970-b01f-ca4a75e07b88","conference_url":"https://api.media.ccc.de/public/conferences/froscon2026"},{"length":2455,"mime_type":"video/mp4","language":"deu","filename":"froscon2026-3559-deu-QEMU_on_speed_microVMs_in_Proxmox_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-08-16T13:50:52.648+02:00","label":"deu 576p","size":95,"recording_url":"https://cdn.media.ccc.de/events/froscon/2026/h264-sd/froscon2026-3559-deu-QEMU_on_speed_microVMs_in_Proxmox_sd.mp4","url":"https://api.media.ccc.de/public/recordings/103514","event_url":"https://api.media.ccc.de/public/events/ede8349a-c68a-4970-b01f-ca4a75e07b88","conference_url":"https://api.media.ccc.de/public/conferences/froscon2026"},{"length":2455,"mime_type":"video/webm;codecs=av01","language":"deu","filename":"froscon2026-3559-deu-QEMU_on_speed_microVMs_in_Proxmox_av1-hd.webm","state":"new","folder":"av1-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-08-16T14:03:00.752+02:00","label":"deu 1080p","size":158,"recording_url":"https://cdn.media.ccc.de/events/froscon/2026/av1-hd/froscon2026-3559-deu-QEMU_on_speed_microVMs_in_Proxmox_av1-hd.webm","url":"https://api.media.ccc.de/public/recordings/103523","event_url":"https://api.media.ccc.de/public/events/ede8349a-c68a-4970-b01f-ca4a75e07b88","conference_url":"https://api.media.ccc.de/public/conferences/froscon2026"},{"length":2455,"mime_type":"video/webm","language":"deu","filename":"froscon2026-3559-deu-QEMU_on_speed_microVMs_in_Proxmox_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-08-16T14:18:04.122+02:00","label":"deu 576p","size":84,"recording_url":"https://cdn.media.ccc.de/events/froscon/2026/webm-sd/froscon2026-3559-deu-QEMU_on_speed_microVMs_in_Proxmox_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/103536","event_url":"https://api.media.ccc.de/public/events/ede8349a-c68a-4970-b01f-ca4a75e07b88","conference_url":"https://api.media.ccc.de/public/conferences/froscon2026"},{"length":2455,"mime_type":"video/webm","language":"deu","filename":"froscon2026-3559-deu-QEMU_on_speed_microVMs_in_Proxmox_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-08-16T14:16:01.501+02:00","label":"deu 1080p","size":193,"recording_url":"https://cdn.media.ccc.de/events/froscon/2026/webm-hd/froscon2026-3559-deu-QEMU_on_speed_microVMs_in_Proxmox_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/103542","event_url":"https://api.media.ccc.de/public/events/ede8349a-c68a-4970-b01f-ca4a75e07b88","conference_url":"https://api.media.ccc.de/public/conferences/froscon2026"}]}