No More Turtles: The SecondaryVM Framework - An Alternative to Nested...
summary
Prototype implements a SecondaryVM framework that lets a primary VM request host-spawned secondary VMs using a vsock channel and a host-side daemon, enforced by cgroups (CPU sets and memory caps) and a resource pool. Libvirt proof-of-concept boots encrypted primaries (AMD SEV) with a 50 GB secondary disk/unplug-shrink-replug workflow to transfer images, and hosts start standard secondary VMs with full device passthrough and near-native performance; control messages are currently plaintext and planned to move to JSON/XML.
AI-written summary · about
chapters (8)
- 0:00Start
- 0:45Present options and drawbacks
- 2:20Solution - Flatten the hierarchy
- 4:11Flatten the hierarchy - Challenges
- 8:32The Secondary VM Daemon
- 9:34Enforcing the limits - Cgroup
- 10:55Proof of Concept - Why Libvirt
- 15:42Future work
related talks
23mHyper-V's Virtual Secure Mode in KVM project update
50mStatic Partitioning and VM-to-VM Communication Mechanisms
12mSecurity and Performance in the Delegated User-level Virtualization
37mHypervisor-less virtio for Real-time and Safety
19mSupporting Trusted Virtual Machines with Hardware-based Secure Remote Memory
45mSecuring Confidential VMs with COCONUT-SVSM
24mThe Common Challenges of Secure VMs
20mIntel Virtualization Technology Extensions to Enable Hardware Isolated VMs