veyepar: CloudABI: Cloud computing meets fine-grained capabilities

Author(s):	Ed Schouten
Location	D2.193 Percy Baxter
Date	feb Wed 03	Days Raw Files
Start	10:40	First Raw Start	10:39
Duration	0:45:00	Offset	0:00:22
End	11:25	Last Raw End	11:29
Chapters	00:00 0:08:27 0:08:29
Total cuts_time	49 min.

https://linux.conf.au/schedule/30012/view_talk
raw-playlist raw-mp4-playlist encoded-files-playlist host archive tweet mp4 svg png

assets release.pdf CloudABI_Cloud_computing_meets_finegrained_capabilities.json
logs
Admin: episode episode list cut list raw files day marks day marks day image_files

State:

Locked:

clear this to unlock

Locked by:

user/process that locked.

Start:

initially scheduled time from master, adjusted to match reality

Duration:

length in hh:mm:ss

Name:

Video Title (shows in video search results)

Emails:

email(s) of the presenter(s)

Released:

has someone authorised pubication

Normalise:

Channelcopy:

m=mono, 01=copy left to right, 10=right to left, 00=ignore.

Thumbnail:

filename.png

Description:

markdown

CloudABI is a new runtime environment that attempts to make it easier to use UNIX-like operating systems at the core of a cloud/cluster computing platform.

Instead of using full machine virtualization (Xen, bhyve, KVM) or techniques that attempt to virtualize namespaces (FreeBSD Jails, Linux cgroups), CloudABI makes it possible to safely run user-provided executables directly on top of a UNIX kernel. The entire setup has very low CPU/memory overhead, but there's also no need for any complex configuration.

Compared to other UNIX ABIs (Linux, FreeBSD, etc), CloudABI is relatively compact. The number of system calls is low (~60) and all data types and structures have been decoupled from the public C runtime environment, meaning that it is relatively straight-forward to add support for CloudABI to other operating systems. Implementations for FreeBSD, Linux and NetBSD already exist. This allows users of such computing platforms to run the same executables without targeting a specific operating system. There is no need to recompile.

CloudABI uses Clang as its C/C++ compiler. It ships with a modern C library that is specifically designed to work in a capabilities-centric environment. The C library is almost entirely thread-safe and has high testing coverage. CloudABI attempts to abstract away traditional UNIX concepts that are not applicable to pure cloud/cluster computing environments, such as UNIX process credentials management (local users and groups), file system access control management and terminal interaction.

In this presentation I will discuss several design aspects of CloudABI and how it can be used to make UNIX software more reliable, more secure and easier to test and deploy.

Comment:

production notes