Difference between revisions of "Hyperlaunch"

From Xen
(Created page with "Xen dom0less enables Jailhouse-style static partitioning for Xen on embedded Arm systems. The domB mode of dom0less further disaggregates the Xen dom0-based boot process to r...")
 
(Add links to the version of the Hyperlaunch design documents that have now been merged into the Xen source tree)
 
(10 intermediate revisions by 2 users not shown)
Line 1: Line 1:
  +
'''Hyperlaunch''' is a new, flexible system for launching the Xen hypervisor and virtual machines.
Xen dom0less enables Jailhouse-style static partitioning for Xen on embedded Arm systems. The domB mode of dom0less further disaggregates the Xen dom0-based boot process to reduce the trusted computing base (TCB), increase boot integrity and enable more flexibility for Xen-based systems with multiple driver domains.
 
  +
  +
The design enables seamless transition for existing systems that require a dom0, and provides a new general capability to build and launch alternative configurations of virtual machines, including support for static partitioning and accelerated start of VMs during host boot, while adhering to the principles of least privilege. It incorporates the existing dom0less functionality, extended to fold in the new developments from the DomB project, with support for both x86 and Arm platform architectures, building upon and replacing the earlier 'late hardware domain' feature for disaggregation of dom0.
  +
  +
Hyperlaunch is designed to be flexible and reusable across multiple use cases, and our aim is to ensure
  +
that it is capable, widely exercised, comprehensively tested, and well understood by the Xen community.
  +
  +
* [https://xenbits.xen.org/gitweb/?p=xen.git;a=blob;f=docs/designs/launch/hyperlaunch.rst;h=4c138da884cc760f205fd37bca1829430148c3b7;hb=d4f3125f1bb4683a61a47d281ac5effa0740e79b Committed version of the Hyperlaunch Design Document, merged 8th July 2021]
  +
* [https://xenbits.xen.org/gitweb/?p=xen.git;a=blob;f=docs/designs/launch/hyperlaunch-devicetree.rst;h=b49c98cfbd0d576cc0b42f18a89080cfec7565e4;hb=0cbed4f0fd94a7fd40662fb0b4b82a58abeca111 Committed version of the Hyperlaunch Device Tree Design Document, merged 8th July 2021]
  +
* [https://static.sched.com/hosted_files/xen2021/d7/Hyperlaunch%20-%20Keynote_%20Xen%20Summit%202021%20-%20Clark%2C%20Smith.pdf Hyperlaunch: A New Start for Xen] - Keynote at the Xen Summit 2021 [https://www.youtube.com/watch?v=Xwtq2Q0ylj0&list=PLYyw7IQjL-zGcRPN6EjiTuFVGo4A6KCNf&index=21 video]
  +
* [https://static.sched.com/hosted_files/xen2021/75/Tuesday_A%20new%20Role%20model%20XSM-.pdf XSM Roles: A New Role Model for Xen] - at the Xen Summit 2021 [https://www.youtube.com/watch?v=j1fDn8ZbyVE&list=PLYyw7IQjL-zGcRPN6EjiTuFVGo4A6KCNf&index=6 video ]
  +
* [https://lists.xenproject.org/archives/html/xen-devel/2021-06/msg00421.html Hyperlaunch Design Session] at the Xen Summit 2021 [https://www.youtube.com/watch?v=j75orDMXO2M&list=PLYyw7IQjL-zGcRPN6EjiTuFVGo4A6KCNf&index=13 video]
  +
* [https://lists.xenproject.org/archives/html/xen-devel/2021-03/msg01286.html Minutes of working group meeting, 18th March 2021]
  +
* [https://github.com/apertussolutions/xen-hyperlaunch/tree/hyperlaunch-prototype-lcm Hypervisor code developed for the hyperlaunch prototype, initial development milestone]
  +
  +
  +
== DomB mode of dom0less ==
   
 
* Xen Summit 2019: [https://www.youtube.com/watch?v=OrtV6gyHW74 Keynote: Xen Dom0-less]
 
* Xen Summit 2019: [https://www.youtube.com/watch?v=OrtV6gyHW74 Keynote: Xen Dom0-less]
 
* Embedded Linux Conference 2019: [https://www.youtube.com/watch?v=UfiP9eAV0WA Static Partitioning Made Simple]
 
* Embedded Linux Conference 2019: [https://www.youtube.com/watch?v=UfiP9eAV0WA Static Partitioning Made Simple]
  +
* xen-devel, June 2018: [https://lists.xenproject.org/archives/html/xen-devel/2018-06/msg01306.html RFC: Boot domain, DomB]
 
* Dec 2019 [https://lists.xen.org/archives/html/xen-devel/2020-01/msg02413.html design meeting in Cambridge]
 
* Dec 2019 [https://lists.xen.org/archives/html/xen-devel/2020-01/msg02413.html design meeting in Cambridge]
 
* May 2020 domB [https://lists.xenproject.org/archives/html/xen-devel/2020-05/msg00233.html design doc v1]
 
* May 2020 domB [https://lists.xenproject.org/archives/html/xen-devel/2020-05/msg00233.html design doc v1]
Line 14: Line 31:
 
* [https://github.com/TrenchBoot/documentation/tree/master/presentations TrenchBoot] and Dynamic Root of Trust for Measurement (DRTM)
 
* [https://github.com/TrenchBoot/documentation/tree/master/presentations TrenchBoot] and Dynamic Root of Trust for Measurement (DRTM)
 
* OpenXT & Boot Integrity [https://openxt.org/ecosystems/ references]
 
* OpenXT & Boot Integrity [https://openxt.org/ecosystems/ references]
* Platform Security Summit 2019 [https://www.platformsecuritysummit.com/2019/videos/ videos]
 
 
* Platform Security Summit 2018 [https://www.platformsecuritysummit.com/2018/videos/ videos]
 
* Platform Security Summit 2018 [https://www.platformsecuritysummit.com/2018/videos/ videos]
  +
* Platform Security Summit 2019 [https://www.platformsecuritysummit.com/2019/videos/ videos]
  +
* [https://github.com/devicetree-org/lopper/blob/3f9f22964bd785949b55fc5d0167c261a1d79c5e/specification/specification.md System Device Tree specification], 16th March 2021
  +
  +
== Earlier design document revisions ==
  +
  +
* [https://lists.xenproject.org/archives/html/xen-devel/2021-05/pdfq6mIMNPNoM.pdf Version 4 of the Hyperlaunch Design Document] - [https://lists.xenproject.org/archives/html/xen-devel/2021-05/msg00690.html posted May 2021]
  +
* [https://lists.xenproject.org/archives/html/xen-devel/2021-05/pdfQlbS0F4suy.pdf Device Tree Design Document for Version 4]
  +
* [https://lists.xenproject.org/archives/html/xen-devel/2021-03/pdfCV4LaWCrTN.pdf Version 3 of the Hyperlaunch Design Document] - [https://lists.xenproject.org/archives/html/xen-devel/2021-03/msg00940.html posted March 2021]
  +
* [https://lists.xenproject.org/archives/html/xen-devel/2021-03/pdfnZl0KbztLQ.pdf Draft of Device Tree Design Document] - [https://lists.xenproject.org/archives/html/xen-devel/2021-03/msg00941.html posted March 2021]
  +
* [https://lists.xenproject.org/archives/html/xen-devel/2020-05/msg00233.html Version 1 of the domB Design Document] - posted May 2020

Latest revision as of 22:46, 26 July 2021

Hyperlaunch is a new, flexible system for launching the Xen hypervisor and virtual machines.

The design enables seamless transition for existing systems that require a dom0, and provides a new general capability to build and launch alternative configurations of virtual machines, including support for static partitioning and accelerated start of VMs during host boot, while adhering to the principles of least privilege. It incorporates the existing dom0less functionality, extended to fold in the new developments from the DomB project, with support for both x86 and Arm platform architectures, building upon and replacing the earlier 'late hardware domain' feature for disaggregation of dom0.

Hyperlaunch is designed to be flexible and reusable across multiple use cases, and our aim is to ensure that it is capable, widely exercised, comprehensively tested, and well understood by the Xen community.


DomB mode of dom0less


Related work

Earlier design document revisions