4 ms·
i'm developing an os with an architecture similar to qubes, in part because i disagree with the idea of using hardware virt as an isolation mechanism. i think t
by xj9 9y ago
i'm developing an os with an architecture similar to qubes, in part because i disagree with the idea of using hardware virt as an isolation mechanism. i think this can be done with os virtualization much more cheaply without being much more difficult to secure. still quite early in the project, but i think we're touching on some interesting stuff.
https://www.heropunch.io/tomo/os/grid/ https://www.heropunch.io/tomo/os/grid/
https://www.joyent.com/tech-videos/going-container-native https://www.joyent.com/tech-videos/going-container-native
https://genode.org/about/index https://genode.org/about/index
- walterbell 9y agoAre you planning to use L4?
- DyslexicAtheist 9y agolooks like it: https://genode.org/about/index https://genode.org/about/index >> the framework aligns the construction principles of L4 with Unix philosophy. In line with Unix philosophy, Genode is a collection of small building blocks, out of which sophisticated systems can be composed. But unlike Unix, those building blocks include not only applications but also all classical OS functionalities including kernels, device drivers, file systems, and protocol stacks.
- xj9 9y agoyes, I'm partial to seL4 in particular. I'm using flatpak as the application image format. these require sessions, but I see that as a plus. the goal isn't compatibility, rather to build an os platform specifically for running p2p applications. linux is a convenient abi and makes windows compat easy. i am using linux and genode to compose a more modern version of the plan 9 system. other core tech includes ipfs, i2p, secure scuttlebutt, and mqtt.
- jerheinze 9y agoHow are you planning to do hardware isolation?
- xj9 9y agohttps://genode.org/documentation/release-notes/13.02#DMA_protection_via_IOMMU https://genode.org/documentation/release-notes/13.02#DMA_pro...