Genode

Genode
The desktop system Sculpt based on Genode
DeveloperGenode Labs
Written inC++
Working stateCurrent
Source modelOpen source
Initial release2008; 17 years ago (2008)
Latest release24.11[1] Edit this on Wikidata / 22 November 2024; 40 days ago (22 November 2024)
Repositorygithub.com/genodelabs/genode
Marketing targetDesktop computers
Embedded systems
Available inEnglish
PlatformsARM, RISC-V,[2] x86, x86-64[3]
Kernel typeMicrokernel
UserlandGenode, POSIX
LicenseAGPL-3.0-only and commercial
Official websitegenode.org

Genode is a free and open-source software operating system (OS) framework consisting of a microkernel abstraction layer and a set of user space components.[4][5][6] The framework is notable as one of the few open-source operating systems not derived from a proprietary OS, such as Unix. The characteristic design philosophy is that a small trusted computing base is of primary concern in a security-oriented OS.

Genode can be used as a basis for a desktop computer[7][8] or tablet[9] OS or as a virtual machine monitor for guest operating systems. The framework has been used as a trusted component of secure virtualization systems for both x86[10] and ARM.[11]

The small codebase of Genode makes it a flexible alternative to more complex Unix-derived operating systems. For this reason the framework has been used as a base system for research in such fields as virtualization,[12] inter-process communication,[13] IP stack isolation,[14][15] monitoring,[16] and software development.[17][18]

History

Genode was first conceived as the Bastei OS Architecture[19] research report at the Technical University of Dresden (TU Dresden). The focus of the report was to determine the practicality of a component-based OS using capability-based security. This report was motivated in part by research into L4 microhypervisors[20] conducted during the same time. Following the success of an early prototype, the authors of the report founded the company Genode Labs to develop Bastei as the Genode OS Framework.

Releases

The project is developed publicly as an open source project released under the terms of the GNU Affero General Public License with a commercial entity offering alternative licensing. Releases are scheduled at three-month intervals to make changes to the system application binary interface (ABI), application programming interface (API), and issue documentation. The OS framework is available in source code form and following the 18.02 release a general purpose derivative named Sculpt is provided with on-target binary deployment.

Architectural features

Genode builds on the general philosophy of microkernels: the smaller and simpler the code, the easier it is to verify for trustworthiness and correctness. Genode extends this philosophy to user space by composing complex applications from small components. Each component exists in a strict hierarchy of parent-child relationships. Any component acting as a parent may apply resource and inter-process communication (IPC) access policies to its children. This hierarchical system layout yields intuitive partitioning and privilege deescalation as specialized subsystems are nested within more general subsystems, mitigating the confused deputy problem endemic to centralized or superuser system policy.

The framework is designed to be hosted by microkernels, however the features of any given microkernel fall mostly within a common set, and monolithic kernels implement a superset of those features. Abstracting these features allows Genode to act as user space for a variety of L4 microkernels,[21][22] and Linux.

Criticism

C++

Genode is often criticized for the choice of its implementation language, C++ (a few other operating systems implemented in C++ include BeOS, Fuchsia, Ghost, Haiku, IncludeOS, Managarm, OSv, Palm OS, ReactOS, SerenityOS, Syllable, and Symbian). This critique usually asserts that C++ is a poor choice for implementing system libraries and APIs because of the inherent complexity of C++ and the difficulty in analyzing code for correct behavior. While Genode does make use of multiple inheritance and templates in its system library, the use of the C++ Standard Library is not allowed and language features that rely on implicit global state, such as thread-local storage and the global allocator, have been removed from the language runtime.[23] Comprehensive static analysis of C++ is not possible. However, the Genode project publishes unit tests for empirical analysis.

XML

Genode components consume and publish state using structured data serialized in XML, in contrast to the plain text model of Unix derivatives. The Genode framework makes use of XML in effectively all of its components because XML is easily parsed and generated programmatically while still being possible to understand and edit manually.

Local namespacing

Genode lacks any practical global namespace; there is no global file system or registry of processes or IPC endpoints. This is in contrast to systems such as Unix which feature a ubiquitous file system and allow a superuser context to arbitrarily manage any process within the system. Explicitly declaring the permissions and routing of components may be perceived as labor-intensive relative to Unix. However, compartmentalizing administration allows subsystems to be managed by mutually untrusted system administrators on the same machine without resorting to virtualizing, a common isolation method.

Sculpt

The Genode project publishes a desktop operating system named Sculpt that targets contemporary consumer laptops.[24] Sculpt is a small base system with automatic device detection and configuration, some GUI control interfaces, and frontends to the Genode package manager. The system does not feature a full desktop environment, but requires users to deploy virtual machines hosting traditional OSes for a fully featured desktop. Sculpt is distinguished from the Genode operating system framework in that it relies heavily on dynamic reconfiguration using privileged control components in contrast to specialized systems with static policies.

See also

  • HelenOS, a desktop microkernel based operating system
  • QNX, a proprietary Unix-like operating system hosted by a microkernel
  • Qubes OS, a desktop operating system that provides security through virtualization
  • Capability-based security

References

  1. ^ "Release 24.11". 22 November 2024. Retrieved 22 December 2024.
  2. ^ "Genode OS adds RISC-V support".
  3. ^ Larabel, Michael. "Genode Is Developing A GPU Multiplexer For Intel Graphics Hardware". Phoronix.
  4. ^ "Introduction of the Genode OS Framework". archive.fosdem.org/2012.
  5. ^ "L4 Based Operating Systems". L4hq.org. Archived from the original on 2018-06-14. Retrieved 2018-06-01.
  6. ^ Larabel, Michael. "Redox OS, MINIX, Hurd & Genode Had Their Time at FOSDEM Too". Phoronix.
  7. ^ Baader, Hans-Joachim. "Genode 2018.2 mit Sculpt OS". pro-linux.de.
  8. ^ Larabel, Michael. "Sculpt Aims to Be a General-Purpose OS Built Atop Genode".
  9. ^ Tarasikov, Alexander (2013-05-11). "Porting Genode to commercial hardware". I hate software. Blogger.
  10. ^ "Muen: An x86/64 Separation Kernel for High Assurance".
  11. ^ Williams, John. "Inspecting data from the safety of your trusted execution environment" (PDF).
  12. ^ "Embassies: Radically Refactoring the Web" (PDF). USENIX.
  13. ^ Wegner, Martin; Holthusen, Sönke (2014-12-11). "Contract Specification and language". ccc-project.org. Archived from the original on 2019-03-27. Retrieved 2018-06-01.
  14. ^ Hamad, Mohammad (2016-01-06). "The Secure Communication Module of CCC". ccc-project.org. Archived from the original on 2019-01-23. Retrieved 2018-06-01.
  15. ^ Hamad, Mohammad. "A communication framework for distributed access control in microkernel-based systems" (PDF).
  16. ^ Pruthiviraj, B.; Madhusuthun, G.S.; Vijayasarathy, S.; Chakrapani, K. "A Microkernel Based Secure Operating System Using Genode Framework" (PDF). JATIT.
  17. ^ Hähne, Ludwig. "Empirical Comparison of SCons and GNU Make" (PDF).
  18. ^ Millo-Sánchez, Reinier; Paz Rodríguez, Waldo; Fajardo-Moya, Alexis. "Genode OS Framework, un framework para el desarrollo de sistemas embebidos". ResearchGate.
  19. ^ "TU Dresden technical report TUD-FI06-07" (PDF).
  20. ^ "NOVA Microhypervisor".
  21. ^ "L4 Based Operating Systems". L4hq.org. Archived from the original on 2018-06-14. Retrieved 2018-06-01.
  22. ^ "SeL4 Community Projects". sel4.systems.
  23. ^ "Genode's Conscious C++ dialect". genodians.org. Retrieved 2019-11-29.
  24. ^ "Release notes 18.02".
Wikimedia Commons has media related to Genode.
Official websites
Research projects

Read other articles:

High 'n' Dry

High 'n' DryAlbum studio karya Def LeppardDirilis11 Juni 1981DirekamBattery Studios, pada 1980 – 9 April di LondonGenreHard rock, Heavy metalDurasi42:15LabelMercuryProduserRobert LangeKronologi Def Leppard On Through the Night (1980)On Through the Night1980 High 'n' Dry (1981) Pyromania (1983)Pyromania1983 High 'n' Dry adalah album kedua ddari grup musik Def Leppard yang dirilis pada tahun 1981. Pada tahun 1984 album ini sempat dirilis uang dengan dua bonus lagu yaitu Bringin' On the He...

 

 

The Animals (film)

2012 Filipino coming-of-age film directed by Gino M Santos For other uses, see Animal (disambiguation). The AnimalsOfficial PosterDirected byGino M. SantosWritten byJeff SteltonProduced byGino M. SantosJane TorresStarringAlbie CasiñoDawn JimenezPatrick SuguiCinematographyAlex EsparteroEdited byRona Delos ReyesJohn WongMusic byDiwa de LeonDJ Nix Damn P!ProductioncompaniesStained Glass ProductionsCinemalayaRelease date July 20, 2012 (2012-07-20) (Cinemalaya Independent Film ...

 

 

Akhir Perang Dunia II di Eropa

Halaman depan The Montreal Daily Star mengumumkan penyerahan Jerman. Akhir Perang Dunia II di Eropa merupakan pertempuran terakhir dari Teater Eropa pada saat Perang Dunia II serta menyerahnya Jerman pada akhir April dan awal Mei 1945. Garis Waktu Pada tanggal 8 Mei 1945 di Berlin-Karlshort, komandan tempur Wilhelm Keitel menandatangani surat kapitulasi tanpa syarat. Ketika Hitler ditemukan telah tewas, Perang Dunia II di Eropa telah usai, Nazi yang mendominasi Jerman dan Eropa telah diguling...

تعليم الجدل

جزء من سلسلة مقالات حولالتصميم الذكي المفاهيم الأنظمة المعقدة غير القابلة للاختزال التعقيدات المتخصصة التوافق الدقيق للكون المصمم الذكي الواقعية الإلوهية حركة التصميم الذكي معهد ديسكوفري المركز للعلم والثقافة إستراتيجية إسفين تحليل نقدي للتطور تعليم الخلاف التصميم ال...

 

 

Maryland Legislative District 8

American legislative district Maryland's legislative district 8Representspart of Baltimore CountySenatorKatherine A. Klausmeier (D)Delegate(s) Nick Allen (D) Harry Bhandari (D) Carl W. Jackson (D) Registration53.3% Democratic26.5% Republican18.6% unaffiliatedDemographics51.8% White30.3% Black/African American0.3% Native American8.5% Asian0.0% Hawaiian/Pacific Islander3.1% Other race5.9% Two or more races6.0% HispanicPopulation (2020)...

 

 

The Lively Ones

American surf music bandThis article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed.Find sources: The Lively Ones – news · newspapers · books · scholar · JSTOR (December 2010) (Learn how and when to remove this template message) You can help expand this article with text translated from the corresponding article in German. (Apri...

Brad Friedel

Brad Friedel Informasi pribadiNama lengkap Bradley Howard FriedelTanggal lahir 18 Mei 1971 (umur 52)Tempat lahir Lakewood, Ohio, United StatesTinggi 6 ft 3 in (1,91 m)Posisi bermain Penjaga gawangKarier junior1990–1992 UCLAKarier senior*Tahun Tim Tampil (Gol)1994–1995 USSF 0 (0)1994 → Newcastle United (loan) 0 (0)1995 → Brøndby (pinjaman) 0 (0)1995–1996 Galatasaray 30 (0)1996–1997 Columbus Crew 38 (0)1997–2000 Liverpool 25 (0)2000–2008 Blackburn Rovers 28...

 

 

The Apple War

1971 Swedish film The Apple WarTheatrical release posterDirected byTage DanielssonWritten byHans AlfredsonTage DanielssonStarringGösta Ekman Hans Alfredsson Tage Danielsson Monica Zetterlund Max von SydowCinematographyLars SvanbergEdited byWic KjellinThomas HoléwaMusic byEvert TaubeDistributed byAB Svensk FilmindustriRelease date 18 December 1971 (1971-12-18) Running time103 minutesCountrySwedenLanguageSwedishBox officeSEK 9.8 million (Sweden)[1] The Apple War (Swedis...

 

 

Soyang River

River in South Korea Soyang River The Soyang is a river of South Korea that is part of the Han River system. This river has its source in Inje County, Gangwon, South Korea.[1] See also South Korea portal Soyang Dam List of rivers of Korea References ^ Soyang River (in Korean). Naver. Retrieved 17 November 2013. 37°53′48″N 127°43′23″E / 37.89667°N 127.72306°E / 37.89667; 127.72306 This article related to a river in South Korea is a stub. You can help...

Ramdhari Singh Dinkar

Ramdhari Singh DinkarLahirRamdhari Singh Dinkar(1908-09-23)23 September 1908Simaria, distrik Munger (sekarang Begusarai), India Britania (sekarang Bihar, India)Meninggal24 April 1974(1974-04-24) (umur 65)PekerjaanPenyair, Pejuang Kemerdekaan, Anggota Parlemen, Esayis, Kritikus sastra, Jurnalis, SatirisPenghargaan1959:Penghargaan Sahitya Akademi 1959: Padma Bhushan 1972: Bharatiya JnanpithAnakKedarnath Singh, Ramsevak SinghOrang tuaManroop Devi (Ibu), Ravi Singh (Ayah)Tanda tang...

 

 

Conversion of non-Islamic places of worship into mosques

Conversion of places of worship Hagia Sophia, an Eastern Orthodox cathedral converted into a mosque in AD 1453. The conversion of non-Islamic places of worship into mosques occurred during the life of Muhammad[citation needed] and continued during subsequent Islamic conquests and invasions and under historical Muslim rule.[citation needed] Hindu temples, Jain Temples, churches, synagogues, and Zoroastrian fire temples have been converted into mosques. Several such mosques...

 

 

L. Mendel Rivers

American politician This article has multiple issues. Please help improve it or discuss these issues on the talk page. (Learn how and when to remove these template messages) This Source may contain excessive or inappropriate references to self-published sources. Please help improve it by removing references to unreliable sources where they are used inappropriately. (February 2015) (Learn how and when to remove this message) This article is written like a story. Please help rewrite this articl...

コルク

この記事は検証可能な参考文献や出典が全く示されていないか、不十分です。出典を追加して記事の信頼性向上にご協力ください。（このテンプレートの使い方）出典検索?: コルク – ニュース · 書籍 · スカラー · CiNii · J-STAGE · NDL · dlib.jp · ジャパンサーチ · TWL（2017年4月） コルクを打ち抜いて作った瓶の栓 コルク（木栓、�...

 

 

コルク

この記事は検証可能な参考文献や出典が全く示されていないか、不十分です。出典を追加して記事の信頼性向上にご協力ください。（このテンプレートの使い方）出典検索?: コルク – ニュース · 書籍 · スカラー · CiNii · J-STAGE · NDL · dlib.jp · ジャパンサーチ · TWL（2017年4月） コルクを打ち抜いて作った瓶の栓 コルク（木栓、�...

 

 

Gouvernorat d'Alep

Gouvernorat d'Alep مُحافظة حلب Localisation du gouvernorat d'Alep en Syrie. Administration Pays Syrie Type Gouvernorat Capitale Alep ISO 3166-2 SY-HL Démographie Population 4 868 000 hab. (2011) Densité 263 hab./km2 Langue(s) ArabeTurcKurdeArménienSyriaque Géographie Superficie 18 482 km2 modifier  Le gouvernorat d'Alep est l'un des quatorze gouvernorats de Syrie ; il a pour capitale la ville d'Alep. Districts Le gouvernorat est subdivis�...

Europhoenix

Europhoenix37884 at St Philip's Marsh depot in May 2016FoundedJune 2008[1]HeadquartersMilton Keynes, United Kingdom[1]Area servedEuropeServicesRailway locomotive hirerOwnerGlenn Edwards[2] Europhoenix is a spot-hire railway locomotive company in England. In addition to the hiring out of locomotives to various other operators across the United Kingdom, it commonly exports former British Rail rolling stock to operators in mainland Europe. The company was founded in 2008...

 

 

Illyrian Provinces

Province of the First French Empire Croatie redirects here. For the country, see Croatia. Illyrian ProvincesProvinces illyriennes (French)1809–1814 Flag Seal Location of Illyrian Provinces (south-east dark blue)– in the First French Empire (dark blue)– in French client states (light blue)StatusAutonomous Provinces of the French First EmpireCapitalLaibach (now Ljubljana, Slovenia)Administrative capitalSegna (now Senj, Croatia)Military capitalOfficial languagesFrenchDemonym(s)Il...

 

 

Tatiek Tito

Tatiek TitoLahirKusmiyati(1938-11-07)7 November 1938Bandung, Hindia BelandaMeninggal1 Oktober 2017(2017-10-01) (umur 78)Depok, Jawa Barat, IndonesiaKebangsaanIndonesiaNama lainTatiek TamzilPekerjaanAktrismodelpenyiar radiohost Tatiek Tito (lahir Kusmiyati; 7 November 1938 – 1 Oktober 2017),[1] atau yang juga dikenal sebagai Tatiek Tamzil, adalah seorang aktris, model, penyiar radio, dan host berkebangsaan Indonesia. Filmografi Bundaku Sayang (1973) Pelarian ...

Public bank

State-owned or noncommercial financial institution For other uses, see Public bank (disambiguation). Part of a series on financial servicesBanking Types of banks Advising Banq Bulge bracket Central Commercial Community development Cooperative Credit union Custodian Depository Development Direct Export credit agency Investment Industrial Merchant Middle market Mutual savings Neobank Offshore Participation Payments Postal savings Private Public Retail Savings Savings and loan Universal Wholesal...

 

 

Reception history of Jane Austen

History of reviews and reputation of works by the English author Jane AustenA watercolour and pencil sketch of Austen, believed to have been drawn from life by her sister Cassandra (c. 1810)Born(1775-12-16)16 December 1775Steventon Rectory, HampshireDied18 July 1817(1817-07-18) (aged 41)Winchester, HampshireResting placeWinchester Cathedral, HampshireNationalityEnglishPeriod1787 to 1809–1811GenresComedy of Manners, RomanceSignature The reception history of Jane Austen follows a pa...