4 ms·
Then add NetBSD drivers as rump kernels to get it running on real hardware. True, drivers in Rust would be even better, but IIUC, the whole point of using a mic
by mwcampbell 11y ago
Then add NetBSD drivers as rump kernels to get it running on real hardware. True, drivers in Rust would be even better, but IIUC, the whole point of using a microkernel is that the drivers would be running in user space with restricted privileges.
- nickpsecurity 11y agoIt helps in fault containment which helps availability primarily. Without IOMMU, they still can wreak havoc. So, drivers shown to be safe is still beneficial. I've so far seen that done with Ada/SPARK, w/ static analysis, Java w/ driver partly in JVM, and most recently ATS language. Rust would make a nice experiment.
- Scramblejams 11y agoNot just that, but I worry about IOMMU bugs. A safe driver would help mitigate those.
- nickpsecurity 11y agoGood point. Few think about that. Hardware will periodically fail, especially on deep-submicron processes.