Multikernel Architecture: Kernel-to-Kernel Isolation and Resource Management

on YouTube ↗50m

" summary

Claims a working multikernel that runs multiple isolated Linux kernel instances on one machine without a hypervisor, using enhanced kexec handover to spawn kernels, device tree overlays to describe and change CPU/memory/PCI partitions, and IPI + shared memory for fast inter-kernel comms; implementation reuses Linux hotplug, XDP/AF_XDP-style queue sharing and jpool memory, includes GitHub code and YouTube demos showing crash isolation and live kernel migration, but needs trusted kernels and better hardware queue/IPI support for full cloud-grade isolation.

AI-written summary · about

" chapters (22)

1. 0:00Introduction and speaker intro
2. 1:05Assumptions about single-kernel systems
3. 2:56History of multi-kernel research
4. 5:05Micronel multi-kernel design overview
5. 7:14Why use Linux kernel instead of custom
6. 8:21Reusing Linux kernel infrastructure
7. 9:25Design philosophy and reuse
8. 10:53Resource management challenges
9. 11:13Static vs dynamic resource allocation
10. 13:01Device tree for resource management
11. 15:50Hot-plug mechanisms for resources
12. 17:36IO device isolation solutions
13. 19:03Networking and storage isolation
14. 22:39Cloud computing use case
15. 24:51Comparison with virtual machines
16. 25:53Live kernel updates
17. 28:43Kernel crash auto-healing
18. 30:31Kernel live debugging
19. 32:16Security model and trade-offs
20. 33:02Hardware support needs
21. 35:13Open source and future plans
22. 37:25Q&A session begins

" related talks

• 22mLXDs: Towards Isolation of Kernel SubsystemsScott Bauer, Sarah Spall, Vikram Narayanan, Abhiram Balasubramanian, Charlie Jacobsen, Michael Quigley, Aftab Hussain, Abdullah Younis, Junjie Shen, Moinak Bhattacharyya, Anton Burtsev · USENIX ATC '19
• 26mMulti-KVM AbstractSean Christopherson, Anish Ghulati · Linux Plumbers Conference 2023
• 33mUnikernels and ExplorationsTiejun Chen · Open Source Summit North America 2017
• 25mLinux Kernel Dynamic CPU IsolationWaiman Long · DevConf.US 2024
• 16mMaking Kernel Bypass Practical for the Cloud with JunctionJoshua Fried, Gohar Irfan Chaudhry, Enrique Saurez, Esha Choukse, Íñigo Goiri, Sameh Elnikety, Rodrigo Fonseca, Adam Belay · 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24)
• 43mAddress Space Isolation for Enhanced Safety of the Linux KernelIgor Stoppa · Critical Software Summit @ Open Source Summit Europe 2022
• 15mμEFI: A Microkernel-Style UEFI with Isolation and TransparencyHaibo Chen, Yubin Xia, Jinyu Gu, Le Chen, Yiyang Wu · USENIX ATC '25
• 21m(Ab)using Linux as a Trusted BootloaderEric Richter · Linux Security Summit 2016