...
Multi-OS System Design on Multicore SoCs
What HV technology can do for future automotive systems.
...
Outline:
Focus: "What HV technology can do for future automotive systems."
1 Motivation: Why to use HV:
- Use of legacy systems with minor modifications,
- address what kind of modifications we expect,
- address problem of open source firmware and driver (MCAL) qualification when running virtualized drivers (see also section 3). HV helps with this by
- isolating critical devices from non-critical ones, allows one to build systems with mixed-criticality w.r.t. safety-relevance.
- qualified driver needs to come with the driver host or even the HV provider
- Use of special purpose Guest/OS for isolating a specific functionality, i.e., building safety and security island
- Sharing of HW in the presence of parallel system executions
- Isolation properties in the presence of parallel systems executions:
- Spatial isolation, hiding of secrets
- Temporal isolation, implicit and explicit shared resources…
2 What does the HW need to fulfill to support unmodified execution of complete SW stacks.
This is directed towards the HV vendor to avoid the problems we have seen in the past.
3 Isolation and Partitioning
multiOS vs. HV
Timing and Spatial isolation
Different types of HV to support partitioning (see Gunnars list)
4 Inter-core communication
VM2VM
HV2VM
And HV-off partition to VMs
5 Sharing of physical devices
What does a HV need to do, to make its usage agnostic to Guest/OS:
Here we place the story on Virtio and generic interfaces
...
Another direction: (Multi-OS design proposal)
1. Introduction
Intro: Need for multi-OS design. Possibilities given by modern hardware, hypervisors and other techniques
...