Re: [MirageOS-devel] Mirage OS and Qubes OS integration

[Anil Madhavapeddy <anil@xxxxxxxxxx>]

On 7 Feb 2016, at 22:33, Thomas Leonard <talex5@xxxxxxxxx> wrote:
> 
>> How is that related to Mirage OS? It can be distributed/installed as
>> minimal root.img, containing just /boot directory with:
>> - a Mirage OS binary
>> - grub2 configuration starting it
>> 
>> Why not installing it directly as a kernel (also using some new qrexec
>> service)? Two reasons:
>> - VM kernel loaded from dom0 filesystem is parsed by a toolstack
>>   running there. While the attack surface is quite small here
>>   (probably only uncompressing code), it still exists

This is indeed how we boot on EC2 at the moment (which uses pv-grub also).

https://github.com/mirage/mirage/blob/master/scripts/ec2.sh

A Mirage Xen unikernel is wrapped in a minimal image that includes a grub.conf 
that points to it.

Anil
_______________________________________________
MirageOS-devel mailing list
MirageOS-devel@xxxxxxxxxxxxxxxxxxxx
http://lists.xenproject.org/cgi-bin/mailman/listinfo/mirageos-devel