MINIX 3: A Reliable and Secure Operating System

on YouTube ↗01h 13m

" summary

MINIX 3 presents a 15,000-line microkernel with drivers and servers as separate user processes, a reincarnation server that automatically restarts failed components, and a live-update mechanism that transfers and validates state to replace servers without rebooting (works in the lab but not yet in main release). It uses Clang/LLVM and NetBSD userland (81% QA compatibility), runs on BeagleBone boards, builds ~5,000 packages, and survives large fault-injection tests (800k injected faults, 18k driver crashes, no system crashes).

AI-written summary · about

" chapters (48)

1. 0:00Intro
2. 0:29GOAL OF OUR WORK: BUILD A RELIABLE OS
3. 1:52THE COMPUTER MODEL (WINDOWS EDITION)
4. 2:50THE COMPUTER MODEL (2)
5. 3:00TYPICAL USER REACTION
6. 3:22IS RELIABILITY SO IMPORTANT?
7. 5:41IS RELIABILITY ACHIEVABLE AT ALL?
8. 7:00A NEED TO RETHINK OPERATING SYSTEMS
9. 8:34BRIEF HISTORY OF OUR WORK
10. 10:22THREE EDITIONS OF THE BOOK
11. 10:55INTELLIGENT DESIGN AS APPLIED TO OPERATING SYSTEMS
12. 12:01ISOLATE COMPONENTS
13. 12:42ISOLATE 1/O
14. 14:18STEP 3: ISOLATE COMMUNICATION
15. 15:05ARCHITECTURE OF MINIX 3
16. 15:32USER-MODE DEVICE DRIVERS
17. 16:58A SIMPLIFIED EXAMPLE: DOING A READ
18. 17:45FILE SERVER (2)
19. 20:02REINCARNATION SERVER
20. 21:01DISK DRIVER RECOVERY
21. 22:16KERNEL RELIABILITY/SECURITY
22. 24:19IPC RELIABILITY/SECURITY
23. 25:07DRIVER RELIABILITY/SECURITY
24. 27:27OTHER ADVANTAGES OF USER DRIVERS
25. 28:13FAULT INJECTION EXPERIMENT
26. 29:07PORT OF MINIX 3 TO ARM
27. 30:39EMBEDDED SYSTEMS
28. 33:23MINIX 3 MEETS BSD
29. 33:53WHY BSD?
30. 35:59NETBSD FEATURES IN MINIX 3.3.0
31. 38:05NETBSD FEATURES MISSING IN MINIX 3.3.0
32. 38:21KYUA TESTS
33. 38:48SYSTEM ARCHITECTURE
34. 39:29MINIX 3 ON THE THREE BEAGLE BOARDS
35. 39:55YOUR ROLE
36. 41:29MINIX 3 IN A NUTSHELL
37. 42:32POSITIONING OF MINIX
38. 44:41EXAMPLE OF HOW WOULD THIS WORK
39. 45:55HOW DO WE DO THE UPDATE?
40. 48:18HOW THE UPDATE WORKS
41. 52:22OTHER USES OF LIVE UPDATE
42. 53:17RESEARCH: FAULT INJECTION
43. 53:39NEW PROGRAM STRUCTURE
44. 54:24MINIX 3 LOGO
45. 55:51DOCUMENTATION IS IN A WIKI
46. 57:04MINIX 3 GOOGLE NEWSGROUP
47. 57:52CONCLUSION
48. 58:13SURVEY

" related talks

• 01h 03mMINIX 3Andrew S. Tanenbaum · FrOSCon 2015
• 38mBuilding Hard Real-Time Linux Systems with XenomaiJan Kiszka · LinuxCon @ Open Source Summit Japan 2023
• 01h 08mUnderstanding, Building and Researching Minimal (and not so minimal) Linux SystemsRon Munitz · foss-north 2020
• 39mRunning Linux on Tiny PeripheralsMarcel Holtmann · LinuxCon + ContainerCon North America 2016
• 40mRunning Linux on Tiny PeripheralsMarcel Holtmann · LinuxCon + ContainerCon Europe 2016
• 49mSteering Xenomai into the Real-Time Linux FutureJan Kiszka · Embedded Linux Conference + OpenIoT Summit North America 2018
• 15mμEFI: A Microkernel-Style UEFI with Isolation and TransparencyHaibo Chen, Yubin Xia, Jinyu Gu, Le Chen, Yiyang Wu · USENIX ATC '25
• 21mOak stage0: a minimal firmware for (confidential) virtual machinesKevin Hui, Mr Andri Saar · Linux Plumbers Conference 2025