[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [MirageOS-devel] Mirage OS and Qubes OS integration

On 7 Feb 2016, at 22:33, Thomas Leonard <talex5@xxxxxxxxx> wrote:
>> How is that related to Mirage OS? It can be distributed/installed as
>> minimal root.img, containing just /boot directory with:
>> - a Mirage OS binary
>> - grub2 configuration starting it
>> Why not installing it directly as a kernel (also using some new qrexec
>> service)? Two reasons:
>> - VM kernel loaded from dom0 filesystem is parsed by a toolstack
>>   running there. While the attack surface is quite small here
>>   (probably only uncompressing code), it still exists

This is indeed how we boot on EC2 at the moment (which uses pv-grub also).


A Mirage Xen unikernel is wrapped in a minimal image that includes a grub.conf 
that points to it.

MirageOS-devel mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.