OpenSBI Domain Support
summary
OpenSBI adds domain support in v0.9 to provide system-level partitioning by using RISC-V physical memory protection (PMP) and a domain model that can extend to ePMP and IOPMP, exposing SBI calls for domain lifecycle and isolation. The project builds firmware hooks in OpenSBI so a trusted bare-metal app runs isolated in one domain while Linux runs in another; the demo shows both domains booted and communicating, proving the mechanism and APIs work end-to-end.
AI-written summary · about
chapters (5)
- 0:00Introduction to OpenSBI
- 3:54Domain support in OpenSBI
- 8:00Implementation details
- 13:27Demo of domain features
- 22:12Q&A session
related talks
52mEnabling New Security Frontiers: Deep-Dive Into Implementing Confidential Computing on RISC-V
21mScaling Data Analytics Via Confidential Computing on RISC-V
23mMind the gaps why we need new, truly open, multi domain heterogeneous solutions
29mSecure and Dynamic Hardware Partitioning Management on Heterogeneous SoC
23mRISC V Enclaves A Clean Slate Approach To Linux Security
15mCore slicing: closing the gap between leaky confidential VMs and bare-metal cloud
19mAn Open Source Approach to System Security
18mIntroducing RISC-V Confidential Computing for IoT Devices