KataContainers and gvisor come to mind. KataContainers really spin up VMs with various optimizations. Gvisor uses a reimplementation of the kernel syscall interface in go, which is also a pretty interesting idea.

We evaluated this but shied away from the complexity... In the end we build a slim version ourself containing

1. A codebuild job running a container image which starts a runner with custom labels

2. A lambda to receive the webhook from github and run the codebuild job on demand.

I haven't implemented it myself - I just assumed this would be the way to folks would do this.

What would implementing all the infra give you in terms of benefits over codebuild?

The readme doesn't mention anything about codebuild that I can see.

CodeBuild can be a bit slow to start sometimes. It also doesn't support Docker on Windows builds and it's limited to 8 hours per run.

Shameless plug: I wrote a CDK construct that lets you create runners on demand in response to a GitHub webhook (so basically what was suggested here only with handling of more corner cases that came up). It lets you start runners in CodeBuild, Fargate, ECS, EC2, or Lambda so you can pick whichever works best for you. There is a table in the readme that shows the difference between them and why you might want to choose one over the other. https://github.com/CloudSnorkel/cdk-github-runners

I recommend the the article about the infantry men who did not shoot https://www.americanheritage.com/secret-soldiers-who-didnt-s... Or better yet the book humankind from rutger bregman. Who wrote a whole chapter about why this experiment does not support this conclusion

Almost every one, but you will loose convince. No schedule, no fancy no go zones, no home automation Integration, no app. But for me it is still worth it. Just clean up the room start the robot and do something else while it is cleaning.

Mine (an older Roomba) allows scheduling and no-go zones. The no-go zones use beacons to delineate them, though.

Idk if I count “turning all the features off” as a valid option…

Yeah now instead of updating one (host) OS I have to update X container OS/user spaces plus the host users pace plus the shared kernel. I think I will pass on this szenario for long term support.

You don't manually update the container images, you ideally pull it from the vendor, who knows best what is needed to get it working, it's also less hassle even if you build the images, because the image only contains the components that are needed to run than application, it doesn't contain things that are needed for your other applications.

If you are able to run multiple applications on one host, you are likely doing the things that containers do for you.

Yes https://en.m.wikipedia.org/wiki/File:Erdbebenzonen.png

All of Germany is less shaky than zone 4, according to the map you link to. In comparison, half the population of California lives in zone 4 if I recall correctly.

Have you tried https://libreddit.de ? It can also be self-hosted