Hyperlaunch: Difference between revisions

From Xen
Jump to navigationJump to search
(Created page with "Xen dom0less enables Jailhouse-style static partitioning for Xen on embedded Arm systems. The domB mode of dom0less further disaggregates the Xen dom0-based boot process to r...")
 
mNo edit summary
 
(16 intermediate revisions by 2 users not shown)
Line 1: Line 1:
'''Hyperlaunch''' is a new, flexible system for launching the Xen hypervisor and virtual machines.
Xen dom0less enables Jailhouse-style static partitioning for Xen on embedded Arm systems. The domB mode of dom0less further disaggregates the Xen dom0-based boot process to reduce the trusted computing base (TCB), increase boot integrity and enable more flexibility for Xen-based systems with multiple driver domains.

The design enables seamless transition for existing systems that require a dom0, and provides a new general capability to build and launch alternative configurations of virtual machines, including support for static partitioning and accelerated start of VMs during host boot, while adhering to the principles of least privilege. It incorporates the existing dom0less functionality, extended to fold in the new developments from the DomB project, with support for both x86 and Arm platform architectures, building upon and replacing the earlier 'late hardware domain' feature for disaggregation of dom0.

Hyperlaunch is designed to be flexible and reusable across multiple use cases, and our aim is to ensure
that it is capable, widely exercised, comprehensively tested, and well understood by the Xen community.

* [https://xenbits.xen.org/gitweb/?p=xen.git;a=blob;f=docs/designs/launch/hyperlaunch.rst;h=4c138da884cc760f205fd37bca1829430148c3b7;hb=d4f3125f1bb4683a61a47d281ac5effa0740e79b Committed version of the Hyperlaunch Design Document, merged 8th July 2021]
* [https://xenbits.xen.org/gitweb/?p=xen.git;a=blob;f=docs/designs/launch/hyperlaunch-devicetree.rst;h=b49c98cfbd0d576cc0b42f18a89080cfec7565e4;hb=0cbed4f0fd94a7fd40662fb0b4b82a58abeca111 Committed version of the Hyperlaunch Device Tree Design Document, merged 8th July 2021]
* [https://sched.co/19GaC Xen Hyperlaunch: From Zero to Assurance] - Keynote at the Xen Summit 2022 [https://www.youtube.com/watch?v=9TIUZTm2Fy4 video]
* [https://static.sched.com/hosted_files/xen2021/d7/Hyperlaunch%20-%20Keynote_%20Xen%20Summit%202021%20-%20Clark%2C%20Smith.pdf Hyperlaunch: A New Start for Xen] - Keynote at the Xen Summit 2021 [https://www.youtube.com/watch?v=Xwtq2Q0ylj0&list=PLYyw7IQjL-zGcRPN6EjiTuFVGo4A6KCNf&index=21 video]
* [https://static.sched.com/hosted_files/xen2021/75/Tuesday_A%20new%20Role%20model%20XSM-.pdf XSM Roles: A New Role Model for Xen] - at the Xen Summit 2021 [https://www.youtube.com/watch?v=j1fDn8ZbyVE&list=PLYyw7IQjL-zGcRPN6EjiTuFVGo4A6KCNf&index=6 video ]
* [https://lists.xenproject.org/archives/html/xen-devel/2021-06/msg00421.html Hyperlaunch Design Session] at the Xen Summit 2021 [https://www.youtube.com/watch?v=j75orDMXO2M&list=PLYyw7IQjL-zGcRPN6EjiTuFVGo4A6KCNf&index=13 video]
* [https://lists.xenproject.org/archives/html/xen-devel/2021-03/msg01286.html Minutes of working group meeting, 18th March 2021]
* [https://github.com/apertussolutions/xen-hyperlaunch/tree/hyperlaunch-prototype-lcm Hypervisor code developed for the hyperlaunch prototype, initial development milestone]

=== Implementation ===

* [https://lists.xenproject.org/archives/html/xen-devel/2024-08/msg01434.html Version 4 patch series: Boot modules for Hyperlaunch] contains the fourth version of changes proposed to the Xen Hypervisor towards integrating Hyperlaunch. This v4 series is initial integration work rather than a full Hyperlaunch feature implementation -- see the [https://lists.xenproject.org/archives/html/xen-devel/2022-07/msg00345.html earlier Version 1 series] for a posted full implementation of the Hyperlaunch feature.
* [https://lists.xenproject.org/archives/html/xen-devel/2023-06/msg01870.html Slides and notes from Design Session at Xen Summit 2023]
* [https://lists.xenproject.org/archives/html/xen-devel/2022-07/msg00345.html Version 1 patch series] posted to [https://lists.xenproject.org/archives/html/xen-devel/ xen-devel mailing list] in July 2022
* [https://lists.xenproject.org/archives/html/xen-devel/2022-05/msg02211.html RFC version of preparatory work on boot logic] posted May 2022
* [https://lists.xenproject.org/archives/html/xen-devel/2021-09/msg00932.html Version 6 of the XSM Roles patch series], posted September 2021


== DomB mode of dom0less ==


* Xen Summit 2019: [https://www.youtube.com/watch?v=OrtV6gyHW74 Keynote: Xen Dom0-less]
* Xen Summit 2019: [https://www.youtube.com/watch?v=OrtV6gyHW74 Keynote: Xen Dom0-less]
* Embedded Linux Conference 2019: [https://www.youtube.com/watch?v=UfiP9eAV0WA Static Partitioning Made Simple]
* Embedded Linux Conference 2019: [https://www.youtube.com/watch?v=UfiP9eAV0WA Static Partitioning Made Simple]
* xen-devel, June 2018: [https://lists.xenproject.org/archives/html/xen-devel/2018-06/msg01306.html RFC: Boot domain, DomB]
* Dec 2019 [https://lists.xen.org/archives/html/xen-devel/2020-01/msg02413.html design meeting in Cambridge]
* Dec 2019 [https://lists.xen.org/archives/html/xen-devel/2020-01/msg02413.html design meeting in Cambridge]
* May 2020 domB [https://lists.xenproject.org/archives/html/xen-devel/2020-05/msg00233.html design doc v1]
* May 2020 domB [https://lists.xenproject.org/archives/html/xen-devel/2020-05/msg00233.html design doc v1]
Line 14: Line 40:
* [https://github.com/TrenchBoot/documentation/tree/master/presentations TrenchBoot] and Dynamic Root of Trust for Measurement (DRTM)
* [https://github.com/TrenchBoot/documentation/tree/master/presentations TrenchBoot] and Dynamic Root of Trust for Measurement (DRTM)
* OpenXT & Boot Integrity [https://openxt.org/ecosystems/ references]
* OpenXT & Boot Integrity [https://openxt.org/ecosystems/ references]
⚫
* Platform Security Summit 2019 [https://www.platformsecuritysummit.com/2019/videos/ videos]
* Platform Security Summit 2018 [https://www.platformsecuritysummit.com/2018/videos/ videos]
* Platform Security Summit 2018 [https://www.platformsecuritysummit.com/2018/videos/ videos]
⚫
* Platform Security Summit 2019 [https://www.platformsecuritysummit.com/2019/videos/ videos]
* [https://github.com/devicetree-org/lopper/blob/3f9f22964bd785949b55fc5d0167c261a1d79c5e/specification/specification.md System Device Tree specification], 16th March 2021

== Earlier design document revisions ==

* [https://lists.xenproject.org/archives/html/xen-devel/2021-05/pdfq6mIMNPNoM.pdf Version 4 of the Hyperlaunch Design Document] - [https://lists.xenproject.org/archives/html/xen-devel/2021-05/msg00690.html posted May 2021]
* [https://lists.xenproject.org/archives/html/xen-devel/2021-05/pdfQlbS0F4suy.pdf Device Tree Design Document for Version 4]
* [https://lists.xenproject.org/archives/html/xen-devel/2021-03/pdfCV4LaWCrTN.pdf Version 3 of the Hyperlaunch Design Document] - [https://lists.xenproject.org/archives/html/xen-devel/2021-03/msg00940.html posted March 2021]
* [https://lists.xenproject.org/archives/html/xen-devel/2021-03/pdfnZl0KbztLQ.pdf Draft of Device Tree Design Document] - [https://lists.xenproject.org/archives/html/xen-devel/2021-03/msg00941.html posted March 2021]
* [https://lists.xenproject.org/archives/html/xen-devel/2020-05/msg00233.html Version 1 of the domB Design Document] - posted May 2020

__NOTOC__

Latest revision as of 20:53, 12 September 2024

Hyperlaunch is a new, flexible system for launching the Xen hypervisor and virtual machines.

The design enables seamless transition for existing systems that require a dom0, and provides a new general capability to build and launch alternative configurations of virtual machines, including support for static partitioning and accelerated start of VMs during host boot, while adhering to the principles of least privilege. It incorporates the existing dom0less functionality, extended to fold in the new developments from the DomB project, with support for both x86 and Arm platform architectures, building upon and replacing the earlier 'late hardware domain' feature for disaggregation of dom0.

Hyperlaunch is designed to be flexible and reusable across multiple use cases, and our aim is to ensure that it is capable, widely exercised, comprehensively tested, and well understood by the Xen community.

Implementation


DomB mode of dom0less


Related work

Earlier design document revisions


Retrieved from "https://wiki.xenproject.org/index.php?title=Hyperlaunch&oldid=20040"