CIF16: Unikernel.org (Amir Chaudhry, Docker Inc)

•

1 gostou•1,464 visualizações

The Linux Foundation

As word about unikernels spreads, more people are trying to learn about this new approach to programming the cloud and embedded devices. Since information is spread across multiple sites, it can be tricky to know where to get an overview and how to get started quickly. So to help with this, there's a new community website at unikernel.org! The unikernel.org community site aims to collate information about the various projects and provide a focal point for early adopters to understand more about the technology and become involved in the projects themselves. Over time, it will also become a gathering place for common infrastructure to form and be shared across projects. Early examples of this include the scripts for booting on Amazon EC2, which began with MirageOS contributors but were used and improved by Rump Kernel contributors. Continuing to work together to make such advances will ease the process of bringing in new users and contributors across all the projects. In this talk, I will: Give examples of how cross-collaboration has advanced different projects Discuss infrastructure and tooling needs that will help all projects Encourage everyone to contribute!

unikernel.org
@amirmc
Amir Chaudhry
Unikernel Systems
Cloud Innovation Forum 
SCaLE 14x
January 2016

unikernel.org
@amirmc
Amir Chaudhry
Cloud Innovation Forum 
SCaLE 14x
January 2016

About me
Worked mostly with MirageOS 
(herding cats)
Supporting wider unikernel activity
Previously Physicist, Neuroscientist, 
CompSci (ish), Startups, BigCo.
@amirmc

The year of
unikernels

2015
@amirmc

@amirmc
new implementations!
2015

@amirmc
at least 10 
projects!

This is awesome!

This is awesome! 
 
Much choice! 
So opportunity!

Cross-project pollination
@amirmc
EC2 deploy scripts

Cross-project pollination
@amirmc
EC2 deploy scripts

Cross-project pollination
@amirmc
EC2 deploy scripts

Cross-project pollination
@amirmc
EC2 deploy scripts

Cross-project pollination
@amirmc
MirageOS and Rumprun

With great choice comes
great discombobulation

@amirmc

@amirmc

@amirmc

@amirmc

So what do we do?

unikernel.org 
devel.unikernel.org

About unikernel.org
@amirmc
Community driven! Just getting started :)
Single entry point for all things unikernel
Ease the process of bringing in new users
and contributors across all the open source
projects
Solve common problems around
conﬁguration, deployment and monitoring

@amirmc

@amirmc
About unikernel.org

What next?
@amirmc
Better design and some kind of branding :)
Discuss common needs and share learning 
(e.g. upcoming HaLVM and Rumprun)
Joint events e.g unikernel install parties?
Shared infrastructure for projects
Whatever else the community of unikernel
developers needs.

What next?
@amirmc
Sign up to devel.unikernel.org!

@amirmc

unikernel.org
@amirmc

Questions?

Mais conteúdo relacionado

Mais procurados

Getting started with project calico

Getting started with project calico

Getting started with project calico

Anirban Sen Chowdhary

Deploying calico on docker

Deploying calico on docker

Deploying calico on docker

Anirban Sen Chowdhary

Docker in der Cloud

Docker in der Cloud

Docker in der Cloud

Sascha Möllering

Calico integration

Calico integration

Calico integration

Anirban Sen Chowdhary

The guide to build a python development VM on your local windows machine to combine both the efficiency of linux and the usability of windows laptop - I use pycharm as an example of python IDE but you can use any IDE that support the remote deployment. For more info about remote deployment function please see the below link https://basimaly.wordpress.com/2015/12/05/remote-deployment-using-pycharm/

Building Python Development Station

Building Python Development Station

Building Python Development Station

Basim Aly (JNCIP-SP, JNCIP-ENT)

Audience: Advanced About: Real world lessons and war stories about Catalyst IT’s experience in rolling out an OpenStack based public cloud in New Zealand. This presentation will provide tips and advice that may save you a lot of time, money and nights of sleep if you are planning to run OpenStack in the future. It may also bring some insights to people that are already running OpenStack in production. Topics covered will include: selection of hardware for optimal costs, techniques that drive quality and service levels up, common deployment mistakes, in place upgrades, how to identify the maturity level of each project and decide what is ready for production, and much more! Speaker Bio: Bruno Lago – Entrepreneur, Catalyst IT Limited Bruno Lago is a solutions architect that has been involved with the Catalyst Cloud (New Zealand’s first public cloud based on OpenStack) from its inception. He is passionate about open source software, cloud computing and disruptive technologies. OpenStack Australia Day - Sydney 2016 https://events.aptira.com/openstack-australia-day-sydney-2016/

Things You MUST Know Before Deploying OpenStack: Bruno Lago, Catalyst IT

Things You MUST Know Before Deploying OpenStack: Bruno Lago, Catalyst IT

Things You MUST Know Before Deploying OpenStack: Bruno Lago, Catalyst IT

OpenNebulaConf 2016 - Evolution of OpenNebula at Netways by Sebastian Saemann...

OpenNebulaConf 2016 - Evolution of OpenNebula at Netways by Sebastian Saemann...

OpenNebulaConf 2016 - Evolution of OpenNebula at Netways by Sebastian Saemann...

OpenNebula Project

Install dev stack

Install dev stack

Install dev stack

Basim Aly (JNCIP-SP, JNCIP-ENT)

Hang fire

"On-premises" FaaS on Kubernetes

"On-premises" FaaS on Kubernetes

"On-premises" FaaS on Kubernetes

Tacker vancouver project onboarding new

Tacker vancouver project onboarding new

Tacker vancouver project onboarding new

Proxmox 4.2 usage in the Standards Interoperability PLM Project

Proxmox 4.2 usage in the Standards Interoperability PLM Project

Proxmox 4.2 usage in the Standards Interoperability PLM Project

Dr Nicolas Figay

Tacker vancouver project update

Tacker vancouver project update

Tacker vancouver project update

xPaaS: The JBoss Way

xPaaS: The JBoss Way

xPaaS: The JBoss Way

VTastic: Akamai Innovations for Distributed System Testing - Jack Wadden, Akamai Akamai Technologies’ CDN platform is a complex, highly-integrated distributed system consisting of over 200,000 servers in over 120 countries.. Processing over 3 Trillion web requests per day, the Akamai platform regularly serves over 30Tbps of traffic to end users around the world. Setup and maintenance of Akamai integration test environments involves a significant investment of hardware, time and subject matter expertise. As a result, these environments are a scarce resource. Using Opennebula, Akamai has developed a system for saving and cloning multi-node integration test environments on-demand. The system is succeeding and has the potential to revolutionize Akamai’s approach to software development and testing. After exploring Akamai’s platform architecture and testing challenges, we will describe the key innovations that enabled the Vtastic solution, challenges we faced in implementing a reliable system, and future capabilities the system can offer.

OpenNebulaConf 2016 - VTastic: Akamai Innovations for Distributed System Test...

OpenNebulaConf 2016 - VTastic: Akamai Innovations for Distributed System Test...

OpenNebulaConf 2016 - VTastic: Akamai Innovations for Distributed System Test...

OpenNebula Project

CloudOpen 2013: Developing cloud infrastructure: from scratch: the tale of an...

CloudOpen 2013: Developing cloud infrastructure: from scratch: the tale of an...

CloudOpen 2013: Developing cloud infrastructure: from scratch: the tale of an...

Andrey Korolyov

Copr HD OpenStack Day India

Copr HD OpenStack Day India

Copr HD OpenStack Day India

Making clouds: turning opennebula into a product

Making clouds: turning opennebula into a product

Making clouds: turning opennebula into a product

The Contrail Virtual Execution Platform (VEP) allows Cloud administrators to manage data centers and monitor the usage of resources. Users can manage their distributed applications on IaaS Cloud providers under the control of Service Level Agreements (SLA). VEP applications are packaged in the standard OVF format and they are deployed inside Constrained Execution Environments (CEE) derived from the SLA, to support the specification of SLA contracts between users and providers. These CEE environments allow to define constraints concerning virtual hardware performance, localization and affinity allowing the administrator to configure the monitoring system in order to feed external SLA enforcement services. VEP integrates elasticity management capabilities which can be controlled by external SLA enforcement services. A resource allocator service is integrated to dispatch the virtual components on the physical resources of the provider in accordance with the SLA terms. The first version of VEP is currently implemented on OpenNebula. This talk presents the implementation of VEP on OpenNebula and discusses some implementation choices such as the resource allocator.

Contrail Virtual Execution Platform

Contrail Virtual Execution Platform

Contrail Virtual Execution Platform

OSv is the revolutionary new open source technology that combines the power of virtualization and micro-services architecture. This combination allows unmodified applications deployed in a virtualized environment to outperform bare-metal deployments. Yes. You've heard it right: for the first time ever we can stop asking the question of how much performance would I lose if I virtualize. OSv lets you ask a different question: how much would my application gain in performance if I virtualize it. This talk will start by looking into the architecture of OSv and the kind of optimizations it makes possible for native, unmodified applications. We will then focus on JVM-specific optimizations and specifically on speedups available to big data management distributed applications. Finally, we will look into the relationship between OSv and Docker and how that layering can help make OSv a secret sauce for turbo-charging Cloud Foundry application deployments.

OSv: probably the best OS for cloud workloads you've never hear of

OSv: probably the best OS for cloud workloads you've never hear of

OSv: probably the best OS for cloud workloads you've never hear of

Mais procurados (20)

Getting started with project calico

Getting started with project calico

Getting started with project calico

Deploying calico on docker

Deploying calico on docker

Deploying calico on docker

Docker in der Cloud

Docker in der Cloud

Docker in der Cloud

Calico integration

Calico integration

Calico integration

Building Python Development Station

Building Python Development Station

Building Python Development Station

Things You MUST Know Before Deploying OpenStack: Bruno Lago, Catalyst IT

Things You MUST Know Before Deploying OpenStack: Bruno Lago, Catalyst IT

Things You MUST Know Before Deploying OpenStack: Bruno Lago, Catalyst IT

OpenNebulaConf 2016 - Evolution of OpenNebula at Netways by Sebastian Saemann...

OpenNebulaConf 2016 - Evolution of OpenNebula at Netways by Sebastian Saemann...

OpenNebulaConf 2016 - Evolution of OpenNebula at Netways by Sebastian Saemann...

Install dev stack

Install dev stack

Install dev stack

Hang fire

"On-premises" FaaS on Kubernetes

"On-premises" FaaS on Kubernetes

"On-premises" FaaS on Kubernetes

Tacker vancouver project onboarding new

Tacker vancouver project onboarding new

Tacker vancouver project onboarding new

Proxmox 4.2 usage in the Standards Interoperability PLM Project

Proxmox 4.2 usage in the Standards Interoperability PLM Project

Proxmox 4.2 usage in the Standards Interoperability PLM Project

Tacker vancouver project update

Tacker vancouver project update

Tacker vancouver project update

xPaaS: The JBoss Way

xPaaS: The JBoss Way

xPaaS: The JBoss Way

OpenNebulaConf 2016 - VTastic: Akamai Innovations for Distributed System Test...

OpenNebulaConf 2016 - VTastic: Akamai Innovations for Distributed System Test...

OpenNebulaConf 2016 - VTastic: Akamai Innovations for Distributed System Test...

CloudOpen 2013: Developing cloud infrastructure: from scratch: the tale of an...

CloudOpen 2013: Developing cloud infrastructure: from scratch: the tale of an...

CloudOpen 2013: Developing cloud infrastructure: from scratch: the tale of an...

Copr HD OpenStack Day India

Copr HD OpenStack Day India

Copr HD OpenStack Day India

Making clouds: turning opennebula into a product

Making clouds: turning opennebula into a product

Making clouds: turning opennebula into a product

Contrail Virtual Execution Platform

Contrail Virtual Execution Platform

Contrail Virtual Execution Platform

OSv: probably the best OS for cloud workloads you've never hear of

OSv: probably the best OS for cloud workloads you've never hear of

OSv: probably the best OS for cloud workloads you've never hear of

Destaque

Unikernels are a burgeoning technology, ripe for deployment in a range of situations, from cloud-hosted microservices to Internet-of-Things platforms. By compiling and linking only the required code, they offer a range of benefits over traditional OS-hosted deployments, notably efficiency and, through smaller attack surfaces, security. While increasing in maturity, to date they have remained something of a technologists' choice: technically compelling but requiring considerable effort to build, deploy and use. To address this, some in the community have spent time trying to integrate unikernel management with the popular Docker container management stack. By enabling unikernels to be managed using the standard Docker command line tools, we bring all the ease-of-use and common understandings of that toolchain to bear on this exciting technology. After giving some context to the challenges faced, we will demonstrate building and running a simple LAMP-like stack using Docker to build and manage Rumprun and MirageOS Unikernels. Thanks to Amir Chaudhry, Justin Cormack, Martin Lucina, Mindy Preston and Jeremy Yallop for assistance in building this demo!

CIF16: Unikernels, Meet Docker! Containing Unikernels (Richard Mortier, Anil ...

CIF16: Unikernels, Meet Docker! Containing Unikernels (Richard Mortier, Anil ...

CIF16: Unikernels, Meet Docker! Containing Unikernels (Richard Mortier, Anil ...

The Linux Foundation

CIF16: Unikernels: The Past, the Present, the Future ( Russell Pavlicek, Xen ...

CIF16: Unikernels: The Past, the Present, the Future ( Russell Pavlicek, Xen ...

CIF16: Unikernels: The Past, the Present, the Future ( Russell Pavlicek, Xen ...

The Linux Foundation

The lightweight and secure nature of Unikernels means that a prime use-case is to customise network behaviour. At the same time, the high-level languages that many are written in means that this sort of low-level coding is opened up to those who might not traditionally consider themselves "systems developers". MirageOS is a particular unikernel platform built in the OCaml functional programming language. Able to seamlessly target a range of environments, from a local (POSIX) development environment to Xen virtual machines running on the cloud, it is a prime example of the ways that unikernels open up low-level development. I will briefly introduce MirageOS before walking through an example developing and then running on Xen a simple network proxy using MirageOS. This proxy will implement a basic form of port-knocking, requiring a sequence of TCP connections (SYNs) to be made to the proxy to indicate a target, before permitting an outgoing connection to that target to be made. Thanks to Thomas Gazagnaire for the material used in the walkthrough!

CIF16: Knock, Knock: Unikernels Calling! (Richard Mortier, Cambridge University)

CIF16: Knock, Knock: Unikernels Calling! (Richard Mortier, Cambridge University)

CIF16: Knock, Knock: Unikernels Calling! (Richard Mortier, Cambridge University)

The Linux Foundation

An important facilitator of Unikernel development, Xen Project continues to develop new and interesting technologies to support the needs of the next generation datacenter. Potentially game-changing technologies like Unikernels will never reach their full potential unless the hypervisor they rely on can handle a large number of potentially tiny VMs effectively and efficiently. In this talk, Xen Project Advisory Board Chairman Lars Kurth will discuss some of the major advances in the hypervisor produced in last year's releases (4.5 and 4.6). He will also discuss some of the work in development which could appear in upcoming releases.

CIF16/Scale14x: The latest from the Xen Project (Lars Kurth, Chairman of Xen ...

CIF16/Scale14x: The latest from the Xen Project (Lars Kurth, Chairman of Xen ...

CIF16/Scale14x: The latest from the Xen Project (Lars Kurth, Chairman of Xen ...

The Linux Foundation

This talk will explore working with the Go language on top of the Rumprun unikernel allowing the end user to deploy a small Go flavored unikernel directly on top of the Xen Project Hypervisor or other hypervisors. We'll start off with explaining the motivation behind this and why we think unikernels are the future of infrastructure. We'll also describe why we thought Go would make a great fit not withstanding it's obvious architectural differences such as virtual memory. Finally, we'll show real live demos of Go running on top of the Rumprun unikernel.

CIF16: Running Go on Rumprun ( Ian Eyberg, DeferPanic Founder)

CIF16: Running Go on Rumprun ( Ian Eyberg, DeferPanic Founder)

CIF16: Running Go on Rumprun ( Ian Eyberg, DeferPanic Founder)

The Linux Foundation

CIF16: Rethinking Foundations for Zero-devops Clouds (Maxim Kharchenko, Cloud...

CIF16: Rethinking Foundations for Zero-devops Clouds (Maxim Kharchenko, Cloud...

CIF16: Rethinking Foundations for Zero-devops Clouds (Maxim Kharchenko, Cloud...

The Linux Foundation

Over the last several years, I and others have talked about the promise of unikernels â€” single-purpose, lightweight virtual machines â€” in the cloud. However, all of these talks have simply presented our architectures and speculated about their usefulness. Over the last several years, Galois has actually been using unikernels to implement interesting components in critical systems: non-bypassable encryption components, network monitors and alarms, platform obfuscation capabilities, Tor nodes, network re-routers, and so on. In this talk, I will speak briefly on each of them and ask the question: Was a unikernel a good platform for this project? If so, why? If not, why not? What are the general rules we can infer about when unikernels are useful, and what part of the cloud ecosystem they are best suited to serve?

XPDS14: Unikernels: Who, What, Where, When, Why - Adam Wick, Galois

XPDS14: Unikernels: Who, What, Where, When, Why - Adam Wick, Galois

XPDS14: Unikernels: Who, What, Where, When, Why - Adam Wick, Galois

The Linux Foundation

Présentation d'Unikernel

Présentation d'Unikernel

Présentation d'Unikernel

UPDATED OCTOBER 2015: Unikernels are small, fast, easily deployable, and very secure application stacks. Lacking a traditional operating system layer, they provide a new way of looking at the cloud which goes beyond the methodologies used by Docker and other container technologies. This is an update of the deck as delivered by Russell Pavlicek. This includes some ground-breaking work done in the Rump Kernel project to bring web servers, database, and scripting language into the world of Unikernels. Deck result of the Ohio Linuxfest 2015 in Columbus, OH.

Next Generation Cloud: Rise of the Unikernel V3 (UPDATED)

Next Generation Cloud: Rise of the Unikernel V3 (UPDATED)

Next Generation Cloud: Rise of the Unikernel V3 (UPDATED)

The Linux Foundation

The confluence of a number of relatively recent trends including the development of virtualization technologies, the deployment of micro datacenters at PoPs, and the availability of microservers, opens up the possibility of evolving the cloud, and the network it is connected to, towards a superfluid cloud: a model where parties other than infrastructure owners can quickly deploy and migrate virtualized services throughout the network (in the core, at aggregation points and at the edge), enabling a number of novel use cases including virtualized CPEs and on-the-fly services, among others. Towards this goal, we identify a number of required mechanisms and present early evaluation results of their implementation. On an inexpensive commodity server, we are able to concurrently run up to 10,000 specialized virtual machines (based on unikernels), instantiate a VM in as little as 10 milliseconds, and migrate it in under 100 milliseconds.

CIF16: Building the Superfluid Cloud with Unikernels (Simon Kuenzer, NEC Europe)

CIF16: Building the Superfluid Cloud with Unikernels (Simon Kuenzer, NEC Europe)

CIF16: Building the Superfluid Cloud with Unikernels (Simon Kuenzer, NEC Europe)

The Linux Foundation

Unikernels and Cloud Computing

Unikernels and Cloud Computing

Unikernels and Cloud Computing

Currently XSM is very limited and restrictive in its functionality . 1) one single big policy controlling all domains, 2) reloading new policy requires host reboot. 3) multiple domains performing similar functions to be grouped under same security label and type. Anshul Makkar, is going to present a talk to discuss about the ongoing work to overcome the above limitations. Some of the security aspect that he will cover Some of the security features that I will cover. 1) Interdomain communication 2) Creating secure stub domains. 3) Securing and segregating introspection domains.

XPDS16: XSM-Flask, current limitations and Ongoing work. - Anshul Makkar, Ct...

XPDS16: XSM-Flask, current limitations and Ongoing work. - Anshul Makkar, Ct...

XPDS16: XSM-Flask, current limitations and Ongoing work. - Anshul Makkar, Ct...

The Linux Foundation

Recent vulnerabilities like Heartbleed and Shellshock have brought the security practices and track record of open-source projects into the spotlight. A project’s response to security issues has a major impact on how much risk end users are exposed to and how the project is perceived in the technology industry. We will compare the security practices of key projects such as Linux, Docker, Xen Project, OpenStack and others. We will explore the trade-offs of different security practices, such as community trust, competing stakeholder interests, fairness and media coverage of vulnerabilities. Finally, we will explore the evolution of the Xen Project’s security process over the past 3 years as a case study. We will illustrate the trade-offs, pain points and unexpected issues we have experienced, to help other projects understand the pit-falls in designing robust security processes and help users of open source projects understand how open source projects manage security vulnerabilities.

Scale14x: Are today's foss security practices robust enough in the cloud era ...

Scale14x: Are today's foss security practices robust enough in the cloud era ...

Scale14x: Are today's foss security practices robust enough in the cloud era ...

The Linux Foundation

This presentation will introduce Display Handler, an open source implementation and framework for providing client virtualized display and input handling within Xen. Display Handler provides a modular approach to both graphics virtualization and input multiplexing. Designed from the ground up to be extensible, the base implementation includes a DRM dumb buffer based renderer, though research is being done on integrating Intel’s GVT-g as an alternative renderer. It includes a fully functional input server which can be extended to support different input sources and output formats as well as providing configurable filtering. The base implementation includes a Windows display driver for Windows XP/7 support, a Linux framebuffer driver for basic Linux guest support, and generic QEMU guest support. A Windows 10 guest display driver is in development in addition to a proper Linux DRM guest driver. It was written in C++ and includes a full suite of unit tests. The presentation will cover the motivation behind the development of Display Handler, the overall architecture, and future directions planned for the framework, especially how it can fit in with various other graphics virtualization technologies that are currently under development. Challenges on providing a beneficial user experience in multi-VM workstations will also be discussed.

XPDS16: Display Handler, a Client Display Framework for Xen - Brendan Kerrig...

XPDS16: Display Handler, a Client Display Framework for Xen - Brendan Kerrig...

XPDS16: Display Handler, a Client Display Framework for Xen - Brendan Kerrig...

The Linux Foundation

This talk presents a new client virtualization platform that allows Xen to be used on mobile phones and tablets. These embedded devices require special consideration, particularly in the context of client virtualization. We will outline the technical challenges of virtualizing common tablet devices, including the touchscreen, audio, webcam, accelerometer, Wi-Fi, cellular, and display devices. TrustZone implications will also be discussed. We will present the current project status and what it took (or will take) to get NVIDIA's Jetson TX1 development board and Google's Pixel C tablet running multiple Android instances. We will provide an overview of the platform’s build toolchain and source trees. Finally, we will open up discussions on the future of the platform and the challenges associated with improving Xen adoption on mobile ARM devices.

XPDS16: Xenbedded: Xen-based client virtualization for phones and tablets - ...

XPDS16: Xenbedded: Xen-based client virtualization for phones and tablets - ...

XPDS16: Xenbedded: Xen-based client virtualization for phones and tablets - ...

The Linux Foundation

As the first ARM servers and microservers hit the market, Xen on ARM is becoming more mature, stable and reaching feature parity with x86. This talk will present the current status of the project, will describe the latest improvements, the gaps that still need to be filled and the roadmap going forward. ARMv8 silicon is now available for purchase: we can measure how well Xen on ARM 64-bit is performing on real hardware and compare the performance figures with other hypervisors. The presentation will show these results, it will measure the overhead introduced by Xen on ARM and will compare it with the overhead introduced by Xen and KVM on x86. The talk will explain the reasons behind performance shortfalls and present ideas on how to address them in the future. The performance results will be used to determine when it makes sense to use Xen on ARM and what are the best use cases for it.

XPDS14 - Xen on ARM: Status and Performance - Stefano Stabellini, Citrix

XPDS14 - Xen on ARM: Status and Performance - Stefano Stabellini, Citrix

XPDS14 - Xen on ARM: Status and Performance - Stefano Stabellini, Citrix

The Linux Foundation

Data Breaches are all over the news these days, and no organization is safe. Nobody, from the largest governments to the biggest banks to the most advanced security companies is able to adequately protect themselves. The difficulty is that there are infinite number of ways to exfiltrate data from an organization ranging from stolen/lost hardware to steganography to malicious insiders to 0Day exploits installing malware to side channels. The industry is trying to solve this problem using detection, heuristics, pattern matching and behavioral analysis. A new approach is clearly needed to fight the Data Breach problem and keep data inside an organization. Come find out how to use Hypervisors to repurpose hardware to protect sensitive data under the assumption of compromised networks, devices and users (Malicious Insiders). In addition, find out how to do so without using any type of detection, heuristics, pattern matching or behavioral analysis, but rather a strictly algorithmic approach rooted in hardware. Finally, learn about how this technology can be used in a generic manner to protect data of DataBases, Server Software, unmodified legacy applications, and unmodified consumer applications such as word processing and spreadsheet software.

XPDS16: Hypervisor Enforced Data Loss Prevention - Neil Sikka, A1LOGIC

XPDS16: Hypervisor Enforced Data Loss Prevention - Neil Sikka, A1LOGIC

XPDS16: Hypervisor Enforced Data Loss Prevention - Neil Sikka, A1LOGIC

The Linux Foundation

1 Day Arm 2007

Docker and other container runtimes are gathering momentum and becoming the new industry standard for server applications. Linux namespaces, commonly used to run Docker apps, come with a large surface of attack which is difficult to reduce. Intel’s Clear Containers use KVM to run containers as VMs to provide additional isolation. It is possible to provide VM-like isolation for containers without sacrificing performance. This talk focuses on the benefits of using Xen to provide an execution environment for Docker apps. The presentation starts by listing the requirements of this environment. It explains why monitoring container syscalls is important and what its security benefits are. The talk introduces a new paravirtualized protocol to virtualize IP sockets and provides the design and implementation details. The presentation clarifies the impact of the new protocol from a security perspective. The discussion concludes by comparing performance figures with the traditional PV network frontend and backend drivers in Linux, explaining the reasons for any performance gaps.

XPDS16: A Paravirtualized Interface for Socket Syscalls - Dimitri Stiliadis, ...

XPDS16: A Paravirtualized Interface for Socket Syscalls - Dimitri Stiliadis, ...

XPDS16: A Paravirtualized Interface for Socket Syscalls - Dimitri Stiliadis, ...

The Linux Foundation

Linaro connect : Introduction to Xen on ARM

Linaro connect : Introduction to Xen on ARM

Linaro connect : Introduction to Xen on ARM

The Linux Foundation

Destaque (20)

CIF16: Unikernels, Meet Docker! Containing Unikernels (Richard Mortier, Anil ...

CIF16: Unikernels, Meet Docker! Containing Unikernels (Richard Mortier, Anil ...

CIF16: Unikernels, Meet Docker! Containing Unikernels (Richard Mortier, Anil ...

CIF16: Unikernels: The Past, the Present, the Future ( Russell Pavlicek, Xen ...

CIF16: Unikernels: The Past, the Present, the Future ( Russell Pavlicek, Xen ...

CIF16: Unikernels: The Past, the Present, the Future ( Russell Pavlicek, Xen ...

CIF16: Knock, Knock: Unikernels Calling! (Richard Mortier, Cambridge University)

CIF16: Knock, Knock: Unikernels Calling! (Richard Mortier, Cambridge University)

CIF16: Knock, Knock: Unikernels Calling! (Richard Mortier, Cambridge University)

CIF16/Scale14x: The latest from the Xen Project (Lars Kurth, Chairman of Xen ...

CIF16/Scale14x: The latest from the Xen Project (Lars Kurth, Chairman of Xen ...

CIF16/Scale14x: The latest from the Xen Project (Lars Kurth, Chairman of Xen ...

CIF16: Running Go on Rumprun ( Ian Eyberg, DeferPanic Founder)

CIF16: Running Go on Rumprun ( Ian Eyberg, DeferPanic Founder)

CIF16: Running Go on Rumprun ( Ian Eyberg, DeferPanic Founder)

CIF16: Rethinking Foundations for Zero-devops Clouds (Maxim Kharchenko, Cloud...

CIF16: Rethinking Foundations for Zero-devops Clouds (Maxim Kharchenko, Cloud...

CIF16: Rethinking Foundations for Zero-devops Clouds (Maxim Kharchenko, Cloud...

XPDS14: Unikernels: Who, What, Where, When, Why - Adam Wick, Galois

XPDS14: Unikernels: Who, What, Where, When, Why - Adam Wick, Galois

XPDS14: Unikernels: Who, What, Where, When, Why - Adam Wick, Galois

Présentation d'Unikernel

Présentation d'Unikernel

Présentation d'Unikernel

Next Generation Cloud: Rise of the Unikernel V3 (UPDATED)

Next Generation Cloud: Rise of the Unikernel V3 (UPDATED)

Next Generation Cloud: Rise of the Unikernel V3 (UPDATED)

CIF16: Building the Superfluid Cloud with Unikernels (Simon Kuenzer, NEC Europe)

CIF16: Building the Superfluid Cloud with Unikernels (Simon Kuenzer, NEC Europe)

CIF16: Building the Superfluid Cloud with Unikernels (Simon Kuenzer, NEC Europe)

Unikernels and Cloud Computing

Unikernels and Cloud Computing

Unikernels and Cloud Computing

XPDS16: XSM-Flask, current limitations and Ongoing work. - Anshul Makkar, Ct...

XPDS16: XSM-Flask, current limitations and Ongoing work. - Anshul Makkar, Ct...

XPDS16: XSM-Flask, current limitations and Ongoing work. - Anshul Makkar, Ct...

Scale14x: Are today's foss security practices robust enough in the cloud era ...

Scale14x: Are today's foss security practices robust enough in the cloud era ...

Scale14x: Are today's foss security practices robust enough in the cloud era ...

XPDS16: Display Handler, a Client Display Framework for Xen - Brendan Kerrig...

XPDS16: Display Handler, a Client Display Framework for Xen - Brendan Kerrig...

XPDS16: Display Handler, a Client Display Framework for Xen - Brendan Kerrig...

XPDS16: Xenbedded: Xen-based client virtualization for phones and tablets - ...

XPDS16: Xenbedded: Xen-based client virtualization for phones and tablets - ...

XPDS16: Xenbedded: Xen-based client virtualization for phones and tablets - ...

XPDS14 - Xen on ARM: Status and Performance - Stefano Stabellini, Citrix

XPDS14 - Xen on ARM: Status and Performance - Stefano Stabellini, Citrix

XPDS14 - Xen on ARM: Status and Performance - Stefano Stabellini, Citrix

XPDS16: Hypervisor Enforced Data Loss Prevention - Neil Sikka, A1LOGIC

XPDS16: Hypervisor Enforced Data Loss Prevention - Neil Sikka, A1LOGIC

XPDS16: Hypervisor Enforced Data Loss Prevention - Neil Sikka, A1LOGIC

1 Day Arm 2007

XPDS16: A Paravirtualized Interface for Socket Syscalls - Dimitri Stiliadis, ...

XPDS16: A Paravirtualized Interface for Socket Syscalls - Dimitri Stiliadis, ...

XPDS16: A Paravirtualized Interface for Socket Syscalls - Dimitri Stiliadis, ...

Linaro connect : Introduction to Xen on ARM

Linaro connect : Introduction to Xen on ARM

Linaro connect : Introduction to Xen on ARM

Semelhante a CIF16: Unikernel.org (Amir Chaudhry, Docker Inc)

Understanding and building Your Own Docker

Understanding and building Your Own Docker

Understanding and building Your Own Docker

Motiejus Jakštys

Unikernels at Polyconf!

Unikernels at Polyconf!

Unikernels at Polyconf!

Innovation and Architecture

Innovation and Architecture

Innovation and Architecture

Adrian Cockcroft

Gunnar Menzel Vice President, Chief Architect - Capgemini Which technologies have made the biggest impact, and which ones will impact us greatest in the future? Will technology advances slow down, stay the same, or speed-up? Which trends and technologies should I consider? The Digital Agenda; shifting business models; and the need for speed at lower cost are impacting, shaping and forming new technologies – creating new opportunities at an ever-increasing pace. Gunnar will outline the various infrastructure-related trends and technologies that are currently key, in addition to those that will prove to be significant going forward.

The Future of Infrastructure: Key Trends to consider

The Future of Infrastructure: Key Trends to consider

The Future of Infrastructure: Key Trends to consider

Boyd Hemphill (Tsunami) Geekfest

Boyd Hemphill (Tsunami) Geekfest

Boyd Hemphill (Tsunami) Geekfest

Unikernels: when you should and when you shouldn't

Unikernels: when you should and when you shouldn't

Unikernels: when you should and when you shouldn't

Business and public-sector entities use individual and aggregated data to understand customer/constituent wants and needs. This can range from basic satisfaction survey data to analyzing movement in physical spaces and tracking shopping cart habits online. There is no shortage of data to analyze and use for planning and prediction. The challenge has always been to understand the context that explains behavior in order to deliver a more personalized experience. Traditionally, that has required an expensive “high touch” approach with staff who can “read” and respond to non-verbal cues. Today, some of this context can be captured using sentiment analysis of text but we are rapidly approaching the point where systems will be able to digitally interpret the parts of human communication that have long been elusive: gestures and the emotions they represent in context. This webinar will present an overview of emerging software and sensor technologies that enable perception and personality-trait analysis. In this webinar, participants will learn: Why sentiment analysis from social media streams is just the beginning for hyper-personalized customer engagement, How technologies to detect and classify gestures and emotions will mature from science fiction and the entertainment-industry to become critical requirements for business applications, and How to incrementally deploy advanced human-computer interface (HCI) technologies in your applications

Sense and Sensors - From Perception to Personality

Sense and Sensors - From Perception to Personality

Sense and Sensors - From Perception to Personality

Ditlev bredahl on app

Ditlev bredahl on app

Ditlev bredahl on app

Mediehuset Ingeniøren Live

Cloud Foundry vs Docker vs Kubernetes - http://bit.ly/2rzUM2U

Cloud Foundry vs Docker vs Kubernetes - http://bit.ly/2rzUM2U

Cloud Foundry vs Docker vs Kubernetes - http://bit.ly/2rzUM2U

CloudCamp

The Web of Things in Practice

The Web of Things in Practice

The Web of Things in Practice

Dominique Guinard

Tandem Launch Presentation

Tandem Launch Presentation

Tandem Launch Presentation

Philippe Collard

SoundCloud API Do:s and Don't:s

SoundCloud API Do:s and Don't:s

SoundCloud API Do:s and Don't:s

Software solution - Lean development and Agile methodologies lesson 1

Software solution - Lean development and Agile methodologies lesson 1

Software solution - Lean development and Agile methodologies lesson 1

Francesco Mapelli

3D Printing and the Future (or Demise) of IP

3D Printing and the Future (or Demise) of IP

3D Printing and the Future (or Demise) of IP

Rising Media, Inc.

SoundCloud API Learnings

SoundCloud API Learnings

SoundCloud API Learnings

MongoDB Europe 2016 - MongoDB, Ops Manager & Docker at SNCF

MongoDB Europe 2016 - MongoDB, Ops Manager & Docker at SNCF

MongoDB Europe 2016 - MongoDB, Ops Manager & Docker at SNCF

Big data groningen

Big data groningen

Big data groningen

Willem Hendriks

Big data groningen

Big data groningen

Big data groningen

Willem Hendriks

Of innovation and impatience - Future Decoded 2015

Of innovation and impatience - Future Decoded 2015

Of innovation and impatience - Future Decoded 2015

Christian Heilmann

Semelhante a CIF16: Unikernel.org (Amir Chaudhry, Docker Inc) (20)

Understanding and building Your Own Docker

Understanding and building Your Own Docker

Understanding and building Your Own Docker

Unikernels at Polyconf!

Unikernels at Polyconf!

Unikernels at Polyconf!

Innovation and Architecture

Innovation and Architecture

Innovation and Architecture

The Future of Infrastructure: Key Trends to consider

The Future of Infrastructure: Key Trends to consider

The Future of Infrastructure: Key Trends to consider

Boyd Hemphill (Tsunami) Geekfest

Boyd Hemphill (Tsunami) Geekfest

Boyd Hemphill (Tsunami) Geekfest

Unikernels: when you should and when you shouldn't

Unikernels: when you should and when you shouldn't

Unikernels: when you should and when you shouldn't

Sense and Sensors - From Perception to Personality

Sense and Sensors - From Perception to Personality

Sense and Sensors - From Perception to Personality

Ditlev bredahl on app

Ditlev bredahl on app

Ditlev bredahl on app

Cloud Foundry vs Docker vs Kubernetes - http://bit.ly/2rzUM2U

Cloud Foundry vs Docker vs Kubernetes - http://bit.ly/2rzUM2U

Cloud Foundry vs Docker vs Kubernetes - http://bit.ly/2rzUM2U

CloudCamp

The Web of Things in Practice

The Web of Things in Practice

The Web of Things in Practice

Tandem Launch Presentation

Tandem Launch Presentation

Tandem Launch Presentation

SoundCloud API Do:s and Don't:s

SoundCloud API Do:s and Don't:s

SoundCloud API Do:s and Don't:s

Software solution - Lean development and Agile methodologies lesson 1

Software solution - Lean development and Agile methodologies lesson 1

Software solution - Lean development and Agile methodologies lesson 1

3D Printing and the Future (or Demise) of IP

3D Printing and the Future (or Demise) of IP

3D Printing and the Future (or Demise) of IP

SoundCloud API Learnings

SoundCloud API Learnings

SoundCloud API Learnings

MongoDB Europe 2016 - MongoDB, Ops Manager & Docker at SNCF

MongoDB Europe 2016 - MongoDB, Ops Manager & Docker at SNCF

MongoDB Europe 2016 - MongoDB, Ops Manager & Docker at SNCF

Big data groningen

Big data groningen

Big data groningen

Big data groningen

Big data groningen

Big data groningen

Of innovation and impatience - Future Decoded 2015

Of innovation and impatience - Future Decoded 2015

Of innovation and impatience - Future Decoded 2015

Mais de The Linux Foundation

Static partitioning is used to split an embedded system into multiple domains, each of them having access only to a portion of the hardware on the SoC. It is key to enable mixed-criticality scenarios, where a critical application, often based on a small RTOS, runs alongside a larger non-critical app, typically based on Linux. The two domains cannot interfere with each other. This talk will explain how to use Xen for static partitioning. It will introduce dom0-less, a new Xen feature written for the purpose. Dom0-less allows multiple VMs to start at boot time directly from the Xen hypervisor, decreasing boot times drastically. It makes it very easy to partition the system without virtualization overhead. Dom0 becomes unnecessary. This presentation will go into details on how to setup a Xen dom0-less system. It will show configuration examples and explain device assignment. The talk will discuss its implications for latency-sensitive and safety-critical environments.

ELC2019: Static Partitioning Made Simple

ELC2019: Static Partitioning Made Simple

ELC2019: Static Partitioning Made Simple

The Linux Foundation

TrenchBoot is a cross-community OSS integration project for hardware-rooted, late launch integrity of open and proprietary systems. It provides a general purpose, open-source DRTM kernel for measured system launch and attestation of device integrity to trust-centric access infrastructure. TrenchBoot closes the UEFI Measurement Gap and reduces the need to trust system firmware. This talk will introduce TrenchBoot architecture and a recent collaboration with Oracle to launch the Linux kernel directly with Intel TXT or AMD SVM Secure Launch. It will propose mechanisms for integrating the Xen hypervisor into a TrenchBoot system launch. DRTM-enabled capabilities for client, server and embedded platforms will be presented for consideration by the Xen community.

XPDDS19: How TrenchBoot is Enabling Measured Launch for Open-Source Platform ...

XPDDS19: How TrenchBoot is Enabling Measured Launch for Open-Source Platform ...

XPDDS19: How TrenchBoot is Enabling Measured Launch for Open-Source Platform ...

The Linux Foundation

Artem will briefly cover what has been done since the first talk on Xen in Automotive domain back in 2013, what is going on now and what is still missing for broad adaptation of Xen in vehicles. The following topics will be covered: Embedded/automotive features of Xen Collaboration with AGL and GENIVI organizations for standardization Efforts on Functional Safety compliance Artem will also go over typical automotive use scenarios for Xen which may not be the same as generic computing use of hypervisor.

XPDDS19 Keynote: Xen in Automotive - Artem Mygaiev, Director, Technology Solu...

XPDDS19 Keynote: Xen in Automotive - Artem Mygaiev, Director, Technology Solu...

XPDDS19 Keynote: Xen in Automotive - Artem Mygaiev, Director, Technology Solu...

The Linux Foundation

XPDDS19 Keynote: Xen Project Weather Report 2019 - Lars Kurth, Director of Op...

XPDDS19 Keynote: Xen Project Weather Report 2019 - Lars Kurth, Director of Op...

XPDDS19 Keynote: Xen Project Weather Report 2019 - Lars Kurth, Director of Op...

The Linux Foundation

In recent years unikernels have shown immense performance potential (e.g., boot times of only a few ms, image sizes of only hundreds of KBs).The fundamental drawback of unikernels is that they require that applications be manually ported to the underlying minimalistic OS, needing both expert work and often considerable amount of time. The Unikraft project provides a unikernel code base and build system that significantly simplifies the building of unikernels. In addition to support for a number CPU architectures, languages and frameworks, Unikraft provides debugging and tracing features that are generally sorely missing from unikernel projects. In this talk we will talk about these features, show a set of preliminary performance numbers, and provide a roadmap for the project's future.

XPDDS19 Keynote: Unikraft Weather Report

XPDDS19 Keynote: Unikraft Weather Report

XPDDS19 Keynote: Unikraft Weather Report

The Linux Foundation

XPDDS19 Keynote: Secret-free Hypervisor: Now and Future - Wei Liu, Software E...

XPDDS19 Keynote: Secret-free Hypervisor: Now and Future - Wei Liu, Software E...

XPDDS19 Keynote: Secret-free Hypervisor: Now and Future - Wei Liu, Software E...

The Linux Foundation

This talk will introduce Dom0-less: a new way of using Xen to build mixed-criticality solutions. Dom0-less is a Xen feature that adds a novel approach to static partitioning based on virtualization. It allows multiple domains to start at boot time directly from the Xen hypervisor, decreasing boot times dramatically. Xen userspace tools, such as xl and libvirt, become optional. Dom0-less extends the existing device tree based Xen boot protocol to cover information required by additional domains. Binaries, such as kernels and ramdisks, are loaded by the bootloader (u-boot) and advertised to Xen via new device tree bindings. The audience will learn how to use Dom0-less to partition the system. Uboot and device tree configuration details will be explained to enable the audience to get the most out of this feature. The talk will include a status update and details on future plans.

XPDDS19 Keynote: Xen Dom0-less - Stefano Stabellini, Principal Engineer, Xilinx

XPDDS19 Keynote: Xen Dom0-less - Stefano Stabellini, Principal Engineer, Xilinx

XPDDS19 Keynote: Xen Dom0-less - Stefano Stabellini, Principal Engineer, Xilinx

The Linux Foundation

As the number of contributions grow, reviewer bandwidth becomes a bottleneck; and maintainers are always asking for more help. However, ultimately maintainers must at least Ack every patch that goes in; so if you're not a maintainer, how can you contribute? Why should anyone care about your opinion? This talk will try to lay out some advice and guidelines for non-maintainers, for how they can do code review in a way which will effectively reduce the load on maintainers when they do come to review a patch.

XPDDS19 Keynote: Patch Review for Non-maintainers - George Dunlap, Citrix Sys...

XPDDS19 Keynote: Patch Review for Non-maintainers - George Dunlap, Citrix Sys...

XPDDS19 Keynote: Patch Review for Non-maintainers - George Dunlap, Citrix Sys...

The Linux Foundation

This talk is a follow-up to our Summit 2017 presentation in which we covered our plans for Intel VMFUNC and #VE, as well as related use-cases. This year, we will provide a report on what we have accomplished in Xen 4.12, and what remains to be addressed. We will also give a brief status update of VMI on AMD hardware. The session will end with some real-world numbers of the Hypervisor Introspection solution running on Citrix Hypervisor 8.0 with #VE enabled.

XPDDS19: Memories of a VM Funk - Mihai Donțu, Bitdefender

XPDDS19: Memories of a VM Funk - Mihai Donțu, Bitdefender

XPDDS19: Memories of a VM Funk - Mihai Donțu, Bitdefender

The Linux Foundation

Safety certification is one of the essential requirements for software to be used in highly regulated industries. Besides technical and compliance issues (such as ISO 26262 vs IEC 611508) transitioning an existing project to become more easily safety certifiable requires significant changes to development practices within an open source project. In this session, we will lay out some challenges of making safety certification achievable in open source and the Xen Project. We will outline the process the Xen Project has followed thus far and highlight lessons learned along the way. The talk will primarily focus on necessary process, tooling changes and community challenges that can prevent progress. We will be offering an in-depth review of how Xen Project is approaching this challenging goal and try to derive lessons for other projects and contributors.

OSSJP/ALS19: The Road to Safety Certification: Overcoming Community Challeng...

OSSJP/ALS19: The Road to Safety Certification: Overcoming Community Challeng...

OSSJP/ALS19: The Road to Safety Certification: Overcoming Community Challeng...

The Linux Foundation

Safety certification is one of the essential requirements for software to be used in highly regulated industries. The Xen Project, a secure and stable hypervisor that is used in many different markets, has been exploring the feasibility of building safety certified products on top of Xen for a year, looking at key aspects of its code base and development practices. In this session, we will lay out the motivation and challenges of making safety certification achievable in open source and the Xen Project. We will outline the process the project has followed thus far and highlight lessons learned along the way. The talk will cover technical enablers, necessary process and tooling changes and community challenges offering an in-depth review of how Xen Project is approaching this exciting and and challenging goal.

OSSJP/ALS19: The Road to Safety Certification: How the Xen Project is Making...

OSSJP/ALS19: The Road to Safety Certification: How the Xen Project is Making...

OSSJP/ALS19: The Road to Safety Certification: How the Xen Project is Making...

The Linux Foundation

2018 saw fundamental shifts in security boundaries which were previously taken for granted. A lot of work has been done in the past 2 years, and largely in secret under embargo, but there is plenty more work to be done to strengthen the existing mitigations and to try to recover some performance without reopening security holes. This talk will look at speculative execution sidechannels, the work which has already been done to mitigate the security holes, and future work which hopes to bring some improvements.

XPDDS19: Speculative Sidechannels and Mitigations - Andrew Cooper, Citrix

XPDDS19: Speculative Sidechannels and Mitigations - Andrew Cooper, Citrix

XPDDS19: Speculative Sidechannels and Mitigations - Andrew Cooper, Citrix

The Linux Foundation

The Arm architecture provides a set of guidelines that any software should abide by when accessing the memory with MMU off and update page-tables. Failing to do so may result in getting TLB conflicts or breaking coherency. In a previous talk ("Keeping coherency on Arm"), we focused on updating safely the stage-2 (aka P2M) page-tables. This talk will focus on the boot code and Xen memory management. During this session, we will introduce some of the guidelines and when they should be used. We will also discuss how Xen boot sequence needs to be reworked to avoid breaking the guidelines.

XPDDS19: Keeping Coherency on Arm: Reborn - Julien Grall, Arm ltd

XPDDS19: Keeping Coherency on Arm: Reborn - Julien Grall, Arm ltd

XPDDS19: Keeping Coherency on Arm: Reborn - Julien Grall, Arm ltd

The Linux Foundation

For many years the QEMU codebase has contained PV backends for Xen guests, giving them paravirtual access to storage, network, keyboard, mouse, etc. however these backends have not been configurable as QEMU devices as their implementation did not fully adhere to the QEMU Object Model (QOM). Particularly the PV storage backend not using proper QOM devices, or qdevs, meant that the QEMU block layer needed to maintain legacy code that was cluttering up the source. This was causing push-back from the maintainers who did not want to accept any patches relating to that Xen backend until it was 'qdevified'. In this talk, I'll explain the modifications I made to QEMU to achieve 'qdevification' of the PV storage backend, how compatibility with the libxl toolstack was maintained, and what the next steps in both QEMU and libxl development should be.

XPDDS19: QEMU PV Backend 'qdevification'... What Does it Mean? - Paul Durrant...

XPDDS19: QEMU PV Backend 'qdevification'... What Does it Mean? - Paul Durrant...

XPDDS19: QEMU PV Backend 'qdevification'... What Does it Mean? - Paul Durrant...

The Linux Foundation

PCI is a local computer bus for attaching hardware devices in a computer, and is the main peripheral bus on modern x86 systems. As such, having a proper way to emulate it is crucial for Xen to be able to expose both fully emulated devices or passthrough devices to guests. This talk will focus on the current status of PCI emulation in Xen, how and where it is used, what are its main limitations and future plans to improve it in order to be more robust and modular.

XPDDS19: Status of PCI Emulation in Xen - Roger Pau Monné, Citrix Systems R&D

XPDDS19: Status of PCI Emulation in Xen - Roger Pau Monné, Citrix Systems R&D

XPDDS19: Status of PCI Emulation in Xen - Roger Pau Monné, Citrix Systems R&D

The Linux Foundation

XPDDS19: [ARM] OP-TEE Mediator in Xen - Volodymyr Babchuk, EPAM Systems

XPDDS19: [ARM] OP-TEE Mediator in Xen - Volodymyr Babchuk, EPAM Systems

XPDDS19: [ARM] OP-TEE Mediator in Xen - Volodymyr Babchuk, EPAM Systems

The Linux Foundation

Xen is a very powerful hypervisor with a talented and diverse developers community. Despite the fact it's almost everywhere (from the Cloud to the embedded world), it can be difficult to set up and manage as a system administrator. General purpose distros have Xen packages, but that's just a start in your Xen journey: you need some tooling and knowledge to have a working and scalable platform. XCP-ng was built to overcome those issues: by bringing Xen to the masses with a fully turnkey distro with Xen as its core. It's the logical sequel to the XCP project, with a community focus from the start. We'll see how it happened, what we did, and what's next. Finally, we'll see the impact of XCP-ng on the Xen Project.

XPDDS19: Bringing Xen to the Masses: The Story of Building a Community-driven...

XPDDS19: Bringing Xen to the Masses: The Story of Building a Community-driven...

XPDDS19: Bringing Xen to the Masses: The Story of Building a Community-driven...

The Linux Foundation

XPDDS19: Will Robots Automate Your Job Away? Streamlining Xen Project Contrib...

XPDDS19: Will Robots Automate Your Job Away? Streamlining Xen Project Contrib...

XPDDS19: Will Robots Automate Your Job Away? Streamlining Xen Project Contrib...

The Linux Foundation

High level toolstacks for server and cloud virtualization are very mature with large communities using and supporting them. Client virtualization is a much more niche community with unique requirements when compared to those found in the server space. In this talk, we’ll introduce a client virtualization toolstack for Xen (redctl) that we are using in Redfield, a new open-source client virtualization distribution that builds upon the work done by the greater virtualization and Linux communities. We will present a case for maturing libxl’s Go bindings and discuss what advantages Go has to offer for high level toolstacks, including in the server space.

XPDDS19: Client Virtualization Toolstack in Go - Nick Rosbrook & Brendan Kerr...

XPDDS19: Client Virtualization Toolstack in Go - Nick Rosbrook & Brendan Kerr...

XPDDS19: Client Virtualization Toolstack in Go - Nick Rosbrook & Brendan Kerr...

The Linux Foundation

Today Xen is scheduling guest virtual cpus on all available physical cpus independently from each other. Recent security issues on modern processors (e.g. L1TF) require to turn off hyperthreading for best security in order to avoid leaking information from one hyperthread to the other. One way to avoid having to turn off hyperthreading is to only ever schedule virtual cpus of the same guest on one physical core at the same time. This is called core scheduling. This presentation shows results from the effort to implement core scheduling in the Xen hypervisor. The basic modifications in Xen are presented and performance numbers with core scheduling active are shown.

XPDDS19: Core Scheduling in Xen - Jürgen Groß, SUSE

XPDDS19: Core Scheduling in Xen - Jürgen Groß, SUSE

XPDDS19: Core Scheduling in Xen - Jürgen Groß, SUSE

The Linux Foundation

Mais de The Linux Foundation (20)

ELC2019: Static Partitioning Made Simple

ELC2019: Static Partitioning Made Simple

ELC2019: Static Partitioning Made Simple

XPDDS19: How TrenchBoot is Enabling Measured Launch for Open-Source Platform ...

XPDDS19: How TrenchBoot is Enabling Measured Launch for Open-Source Platform ...

XPDDS19: How TrenchBoot is Enabling Measured Launch for Open-Source Platform ...

XPDDS19 Keynote: Xen in Automotive - Artem Mygaiev, Director, Technology Solu...

XPDDS19 Keynote: Xen in Automotive - Artem Mygaiev, Director, Technology Solu...

XPDDS19 Keynote: Xen in Automotive - Artem Mygaiev, Director, Technology Solu...

XPDDS19 Keynote: Xen Project Weather Report 2019 - Lars Kurth, Director of Op...

XPDDS19 Keynote: Xen Project Weather Report 2019 - Lars Kurth, Director of Op...

XPDDS19 Keynote: Xen Project Weather Report 2019 - Lars Kurth, Director of Op...

XPDDS19 Keynote: Unikraft Weather Report

XPDDS19 Keynote: Unikraft Weather Report

XPDDS19 Keynote: Unikraft Weather Report

XPDDS19 Keynote: Secret-free Hypervisor: Now and Future - Wei Liu, Software E...

XPDDS19 Keynote: Secret-free Hypervisor: Now and Future - Wei Liu, Software E...

XPDDS19 Keynote: Secret-free Hypervisor: Now and Future - Wei Liu, Software E...

XPDDS19 Keynote: Xen Dom0-less - Stefano Stabellini, Principal Engineer, Xilinx

XPDDS19 Keynote: Xen Dom0-less - Stefano Stabellini, Principal Engineer, Xilinx

XPDDS19 Keynote: Xen Dom0-less - Stefano Stabellini, Principal Engineer, Xilinx

XPDDS19 Keynote: Patch Review for Non-maintainers - George Dunlap, Citrix Sys...

XPDDS19 Keynote: Patch Review for Non-maintainers - George Dunlap, Citrix Sys...

XPDDS19 Keynote: Patch Review for Non-maintainers - George Dunlap, Citrix Sys...

XPDDS19: Memories of a VM Funk - Mihai Donțu, Bitdefender

XPDDS19: Memories of a VM Funk - Mihai Donțu, Bitdefender

XPDDS19: Memories of a VM Funk - Mihai Donțu, Bitdefender

OSSJP/ALS19: The Road to Safety Certification: Overcoming Community Challeng...

OSSJP/ALS19: The Road to Safety Certification: Overcoming Community Challeng...

OSSJP/ALS19: The Road to Safety Certification: Overcoming Community Challeng...

OSSJP/ALS19: The Road to Safety Certification: How the Xen Project is Making...

OSSJP/ALS19: The Road to Safety Certification: How the Xen Project is Making...

OSSJP/ALS19: The Road to Safety Certification: How the Xen Project is Making...

XPDDS19: Speculative Sidechannels and Mitigations - Andrew Cooper, Citrix

XPDDS19: Speculative Sidechannels and Mitigations - Andrew Cooper, Citrix

XPDDS19: Speculative Sidechannels and Mitigations - Andrew Cooper, Citrix

XPDDS19: Keeping Coherency on Arm: Reborn - Julien Grall, Arm ltd

XPDDS19: Keeping Coherency on Arm: Reborn - Julien Grall, Arm ltd

XPDDS19: Keeping Coherency on Arm: Reborn - Julien Grall, Arm ltd

XPDDS19: QEMU PV Backend 'qdevification'... What Does it Mean? - Paul Durrant...

XPDDS19: QEMU PV Backend 'qdevification'... What Does it Mean? - Paul Durrant...

XPDDS19: QEMU PV Backend 'qdevification'... What Does it Mean? - Paul Durrant...

XPDDS19: Status of PCI Emulation in Xen - Roger Pau Monné, Citrix Systems R&D

XPDDS19: Status of PCI Emulation in Xen - Roger Pau Monné, Citrix Systems R&D

XPDDS19: Status of PCI Emulation in Xen - Roger Pau Monné, Citrix Systems R&D

XPDDS19: [ARM] OP-TEE Mediator in Xen - Volodymyr Babchuk, EPAM Systems

XPDDS19: [ARM] OP-TEE Mediator in Xen - Volodymyr Babchuk, EPAM Systems

XPDDS19: [ARM] OP-TEE Mediator in Xen - Volodymyr Babchuk, EPAM Systems

XPDDS19: Bringing Xen to the Masses: The Story of Building a Community-driven...

XPDDS19: Bringing Xen to the Masses: The Story of Building a Community-driven...

XPDDS19: Bringing Xen to the Masses: The Story of Building a Community-driven...

XPDDS19: Will Robots Automate Your Job Away? Streamlining Xen Project Contrib...

XPDDS19: Will Robots Automate Your Job Away? Streamlining Xen Project Contrib...

XPDDS19: Will Robots Automate Your Job Away? Streamlining Xen Project Contrib...

XPDDS19: Client Virtualization Toolstack in Go - Nick Rosbrook & Brendan Kerr...

XPDDS19: Client Virtualization Toolstack in Go - Nick Rosbrook & Brendan Kerr...

XPDDS19: Client Virtualization Toolstack in Go - Nick Rosbrook & Brendan Kerr...

XPDDS19: Core Scheduling in Xen - Jürgen Groß, SUSE

XPDDS19: Core Scheduling in Xen - Jürgen Groß, SUSE

XPDDS19: Core Scheduling in Xen - Jürgen Groß, SUSE

Último

How to Troubleshoot Apps for the Modern Connected Worker

How to Troubleshoot Apps for the Modern Connected Worker

How to Troubleshoot Apps for the Modern Connected Worker

Partners Life - Insurer Innovation Award 2024

Partners Life - Insurer Innovation Award 2024

Partners Life - Insurer Innovation Award 2024

The Digital Insurer

Sara Mae O’Brien Scott and Tatiana Baquero Cakici, Senior Consultants at Enterprise Knowledge (EK), presented “AI Fast Track to Search-Focused AI Solutions” at the Information Architecture Conference (IAC24) that took place on April 11, 2024 in Seattle, WA. In their presentation, O’Brien-Scott and Cakici focused on what Enterprise AI is, why it is important, and what it takes to empower organizations to get started on a search-based AI journey and stay on track. The presentation explored the complexities of enterprise search challenges and how IA principles can be leveraged to provide AI solutions through the use of a semantic layer. O’Brien-Scott and Cakici showcased a case study where a taxonomy, an ontology, and a knowledge graph were used to structure content at a healthcare workforce solutions organization, providing personalized content recommendations and increasing content findability. In this session, participants gained insights about the following: Most common types of AI categories and use cases; Recommended steps to design and implement taxonomies and ontologies, ensuring they evolve effectively and support the organization’s search objectives; Taxonomy and ontology design considerations and best practices; Real-world AI applications that illustrated the value of taxonomies, ontologies, and knowledge graphs; and Tools, roles, and skills to design and implement AI-powered search solutions.

IAC 2024 - IA Fast Track to Search Focused AI Solutions

IAC 2024 - IA Fast Track to Search Focused AI Solutions

IAC 2024 - IA Fast Track to Search Focused AI Solutions

Enterprise Knowledge

Handwritten Text Recognition for manuscripts and early printed texts

Handwritten Text Recognition for manuscripts and early printed texts

Handwritten Text Recognition for manuscripts and early printed texts

Maria Levchenko

Presentation on how to chat with PDF using ChatGPT code interpreter

Presentation on how to chat with PDF using ChatGPT code interpreter

Presentation on how to chat with PDF using ChatGPT code interpreter

What are drone anti-jamming systems? The drone anti-jamming systems and anti-spoof technology protect against interference, jamming, and spoofing of the UAVs. To protect their security, countries are beginning to research drone anti-jamming systems, also known as drone strike weapons. The anti-jam and anti-spoof technology protects against interference, jamming and spoofing. A drone strike weapon is a drone attack weapon that can attack and destroy enemy drones. So what is so unique about this amazing system?

What Are The Drone Anti-jamming Systems Technology?

What Are The Drone Anti-jamming Systems Technology?

What Are The Drone Anti-jamming Systems Technology?

Antenna Manufacturer Coco

Axa Assurance Maroc - Insurer Innovation Award 2024

Axa Assurance Maroc - Insurer Innovation Award 2024

Axa Assurance Maroc - Insurer Innovation Award 2024

The Digital Insurer

The Raspberry Pi 5 was announced on October 2023. This new version of the popular embedded device comes with a new iteration of Broadcom’s VideoCore GPU platform, and was released with a fully open source driver stack, developed by Igalia. The presentation will discuss some of the major changes required to support this new Video Core iteration, the challenges we faced in the process and the solutions we provided in order to deliver conformant OpenGL ES and Vulkan drivers. The talk will also cover the next steps for the open source Raspberry Pi 5 graphics stack. (c) Embedded Open Source Summit 2024 April 16-18, 2024 Seattle, Washington (US) https://events.linuxfoundation.org/embedded-open-source-summit/ https://eoss24.sched.com/event/1aBEx

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Three things you will take away from the session: • How to run an effective tenant-to-tenant migration • Best practices for before, during, and after migration • Tips for using migration as a springboard to prepare for Copilot in Microsoft 365 Main ideas: Migration Overview: The presentation covers the current reality of cross-tenant migrations, the triggers, phases, best practices, and benefits of a successful tenant migration Considerations: When considering a migration, it is important to consider the migration scope, performance, customization, flexibility, user-friendly interface, automation, monitoring, support, training, scalability, data integrity, data security, cost, and licensing structure Next Wave: The next wave of change includes the launch of Copilot, which requires businesses to be prepared for upcoming changes related to Copilot and the cloud, and to consolidate data and tighten governance ShareGate: ShareGate can help with pre-migration analysis, configurable migration tool, and automated, end-user driven collaborative governance

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Product Anonymous

Finology Group – Insurtech Innovation Award 2024

Finology Group – Insurtech Innovation Award 2024

Finology Group – Insurtech Innovation Award 2024

The Digital Insurer

GenCyber Cyber Security Day Presentation

GenCyber Cyber Security Day Presentation

GenCyber Cyber Security Day Presentation

Michael W. Hawkins

BooK Now Call us at +918448380779 to hire a gorgeous and seductive call girl for sex. Take a Delhi Escort Service. The help of our escort agency is mostly meant for men who want sexual Indian Escorts In Delhi NCR. It should be noted that any impersonator will get 100 attention from our Young Girls Escorts in Delhi. They will assume the position of reliable allies. VIP Call Girl With Original Photos Book Tonight +918448380779 Our Cheap Price 1 Hour not available 2 Hours 5000 Full Night 8000 TAG: Call Girls in Delhi, Noida, Gurgaon, Ghaziabad, Connaught Place, Greater Kailash Delhi, Lajpat Nagar Delhi, Mayur Vihar Delhi, Chanakyapuri Delhi, New Friends Colony Delhi, Majnu Ka Tilla, Karol Bagh, Malviya Nagar, Saket, Khan Market, Noida Sector 18, Noida Sector 76, Noida Sector 51, Gurgaon Mg Road, Iffco Chowk Gurgaon, Rajiv Chowk Gurgaon All Delhi Ncr Free Home Deliver

08448380779 Call Girls In Greater Kailash - I Women Seeking Men

08448380779 Call Girls In Greater Kailash - I Women Seeking Men

08448380779 Call Girls In Greater Kailash - I Women Seeking Men

Delhi Call girls

Automating Google Workspace (GWS) & more with Apps Script

Automating Google Workspace (GWS) & more with Apps Script

Automating Google Workspace (GWS) & more with Apps Script

Heather Hedden, Senior Consultant at Enterprise Knowledge, presented “The Role of Taxonomy and Ontology in Semantic Layers” at a webinar hosted by Progress Semaphore on April 16, 2024. Taxonomies at their core enable effective tagging and retrieval of content, and combined with ontologies they extend to the management and understanding of related data. There are even greater benefits of taxonomies and ontologies to enhance your enterprise information architecture when applying them to a semantic layer. A survey by DBP-Institute found that enterprises using a semantic layer see their business outcomes improve by four times, while reducing their data and analytics costs. Extending taxonomies to a semantic layer can be a game-changing solution, allowing you to connect information silos, alleviate knowledge gaps, and derive new insights. Hedden, who specializes in taxonomy design and implementation, presented how the value of taxonomies shouldn’t reside in silos but be integrated with ontologies into a semantic layer. Learn about: - The essence and purpose of taxonomies and ontologies in information and knowledge management; - Advantages of semantic layers leveraging organizational taxonomies; and - Components and approaches to creating a semantic layer, including the integration of taxonomies and ontologies

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf

Enterprise Knowledge

Boost Fertility New Invention Ups Success Rates.pdf

Boost Fertility New Invention Ups Success Rates.pdf

Boost Fertility New Invention Ups Success Rates.pdf

sudhanshuwaghmare1

This presentations targets students or working professionals. You may know Google for search, YouTube, Android, Chrome, and Gmail, but did you know Google has many developer tools, platforms & APIs? This comprehensive yet still high-level overview outlines the most impactful tools for where to run your code, store & analyze your data. It will also inspire you as to what's possible. This talk is 50 minutes in length.

Powerful Google developer tools for immediate impact! (2023-24 C)

Powerful Google developer tools for immediate impact! (2023-24 C)

Powerful Google developer tools for immediate impact! (2023-24 C)

Tech Trends Report 2024 Future Today Institute.pdf

Tech Trends Report 2024 Future Today Institute.pdf

Tech Trends Report 2024 Future Today Institute.pdf

GenAI Risks & Security Meetup 01052024.pdf

GenAI Risks & Security Meetup 01052024.pdf

GenAI Risks & Security Meetup 01052024.pdf

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

The Digital Insurer

Último (20)

How to Troubleshoot Apps for the Modern Connected Worker

How to Troubleshoot Apps for the Modern Connected Worker

How to Troubleshoot Apps for the Modern Connected Worker

Partners Life - Insurer Innovation Award 2024

Partners Life - Insurer Innovation Award 2024

Partners Life - Insurer Innovation Award 2024

IAC 2024 - IA Fast Track to Search Focused AI Solutions

IAC 2024 - IA Fast Track to Search Focused AI Solutions

IAC 2024 - IA Fast Track to Search Focused AI Solutions

Handwritten Text Recognition for manuscripts and early printed texts

Handwritten Text Recognition for manuscripts and early printed texts

Handwritten Text Recognition for manuscripts and early printed texts

Presentation on how to chat with PDF using ChatGPT code interpreter

Presentation on how to chat with PDF using ChatGPT code interpreter

Presentation on how to chat with PDF using ChatGPT code interpreter

What Are The Drone Anti-jamming Systems Technology?

What Are The Drone Anti-jamming Systems Technology?

What Are The Drone Anti-jamming Systems Technology?

Axa Assurance Maroc - Insurer Innovation Award 2024

Axa Assurance Maroc - Insurer Innovation Award 2024

Axa Assurance Maroc - Insurer Innovation Award 2024

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Finology Group – Insurtech Innovation Award 2024

Finology Group – Insurtech Innovation Award 2024

Finology Group – Insurtech Innovation Award 2024

GenCyber Cyber Security Day Presentation

GenCyber Cyber Security Day Presentation

GenCyber Cyber Security Day Presentation

08448380779 Call Girls In Greater Kailash - I Women Seeking Men

08448380779 Call Girls In Greater Kailash - I Women Seeking Men

08448380779 Call Girls In Greater Kailash - I Women Seeking Men

Automating Google Workspace (GWS) & more with Apps Script

Automating Google Workspace (GWS) & more with Apps Script

Automating Google Workspace (GWS) & more with Apps Script

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf

Boost Fertility New Invention Ups Success Rates.pdf

Boost Fertility New Invention Ups Success Rates.pdf

Boost Fertility New Invention Ups Success Rates.pdf

Powerful Google developer tools for immediate impact! (2023-24 C)

Powerful Google developer tools for immediate impact! (2023-24 C)

Powerful Google developer tools for immediate impact! (2023-24 C)

Tech Trends Report 2024 Future Today Institute.pdf

Tech Trends Report 2024 Future Today Institute.pdf

Tech Trends Report 2024 Future Today Institute.pdf

GenAI Risks & Security Meetup 01052024.pdf

GenAI Risks & Security Meetup 01052024.pdf

GenAI Risks & Security Meetup 01052024.pdf

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

CIF16: Unikernel.org (Amir Chaudhry, Docker Inc)

1. unikernel.org @amirmc Amir Chaudhry Unikernel Systems Cloud Innovation Forum  SCaLE 14x January 2016

2. unikernel.org @amirmc Amir Chaudhry Cloud Innovation Forum  SCaLE 14x January 2016

3. About me Worked mostly with MirageOS  (herding cats) Supporting wider unikernel activity Previously Physicist, Neuroscientist,  CompSci (ish), Startups, BigCo. @amirmc

4. The year of unikernels

5. 2015 @amirmc

6. @amirmc new implementations! 2015

7. @amirmc at least 10  projects!

8. This is awesome!

9. This is awesome!    Much choice!  So opportunity!

10. Cross-project pollination @amirmc EC2 deploy scripts

11. Cross-project pollination @amirmc EC2 deploy scripts

12. Cross-project pollination @amirmc EC2 deploy scripts

13. Cross-project pollination @amirmc EC2 deploy scripts

14. Cross-project pollination @amirmc MirageOS and Rumprun

15. With great choice comes great discombobulation

20. So what do we do?

21. unikernel.org  devel.unikernel.org

22. About unikernel.org @amirmc Community driven! Just getting started :) Single entry point for all things unikernel Ease the process of bringing in new users and contributors across all the open source projects Solve common problems around conﬁguration, deployment and monitoring

24. @amirmc About unikernel.org

25. What next? @amirmc Better design and some kind of branding :) Discuss common needs and share learning  (e.g. upcoming HaLVM and Rumprun) Joint events e.g unikernel install parties? Shared infrastructure for projects Whatever else the community of unikernel developers needs.

26. What next? @amirmc Sign up to devel.unikernel.org!

28. unikernel.org @amirmc