Re:SeL4 Device Driver Framework 0.4.0
by naasking on Tuesday April 09, 2024 @12:53PM
(#39981352)
Very interesting. I couldn't find a high-level overview of how they're approaching this though. It seems like they might be re-implementing some Linux APIs, but I have the impression that it runs all those APIs in a single process, like hosting a UNIX or Linux kernel as a guest OS, which would be a fairly large TCB. Is there a reference document that describes the system architecture in more detail? Their handbook is a little thin on details.
[ Parent
| on HN ]
I agree such a document would be helpful.
However, there's a talk[0] from three years ago. I would imagine the architecture has changed since then.
This was the best I found: https://docs.managarm.org/handbook/sys-arch/thoreir/index.ht...
So as I suspected, posix-subsystem is a single process that provides the POSIX support for all other process, so it's a single point of failure: https://docs.managarm.org/handbook/sys-arch/posix/index.html
It's interesting that they have some kind of subsystem to run code in kernel space too, very against typical microkernel thinking for isolation/safety reasons.