容器还是虚拟机？这是虚拟化绕不开的问题。我从性能、隔离性、运维成本三个角度做了实测对比，记录下选择思路。
KVM 跑起来容易，跑得快就要调优了。这篇笔记记录 CPU 直通、内存预留、磁盘缓存和嵌套虚拟化四个调优点。
%22%20opacity%3D%220.35%22%2F%3E%3Cdefs%3E%3ClinearGradient%20id%3D%22s%22%20x1%3D%220%22%20y1%3D%220%22%20x2%3D%221%22%20y2%3D%221%22%3E%3Cstop%20offset%3D%220%22%20stop-color%3D%22%23fff%22%2F%3E%3Cstop%20offset%3D%221%22%20stop-color%3D%22%23000%22%2F%3E%3C%2FlinearGradient%3E%3C%2Fdefs%3E%3Ctext%20x%3D%2250%25%22%20y%3D%2252%25%22%20font-size%3D%22110%22%20fill%3D%22%23fff%22%20text-anchor%3D%22middle%22%20dominant-baseline%3D%22middle%22%20font-family%3D%22sans-serif%22%3EL%3C%2Ftext%3E%3C%2Fsvg%3E)
%22%20opacity%3D%220.35%22%2F%3E%3Cdefs%3E%3ClinearGradient%20id%3D%22s%22%20x1%3D%220%22%20y1%3D%220%22%20x2%3D%221%22%20y2%3D%221%22%3E%3Cstop%20offset%3D%220%22%20stop-color%3D%22%23fff%22%2F%3E%3Cstop%20offset%3D%221%22%20stop-color%3D%22%23000%22%2F%3E%3C%2FlinearGradient%3E%3C%2Fdefs%3E%3Ctext%20x%3D%2250%25%22%20y%3D%2252%25%22%20font-size%3D%22110%22%20fill%3D%22%23fff%22%20text-anchor%3D%22middle%22%20dominant-baseline%3D%22middle%22%20font-family%3D%22sans-serif%22%3EK%3C%2Ftext%3E%3C%2Fsvg%3E)