Unmodified Device Driver Reuse and Improved System未修改的设备驱动重用和改进系统.pptVIP

Unmodified Device Driver Reuse and Improved System Dependability via Virtual MachinesJoshua Le Vasseur, Volkmar Uhlig, Jan Stoess, Stefan Gotz – OSDI-2004 Raju Kumar CS598C: Virtual Machines Introduction Device Drivers - 70% of Linux 2.4.1 code for IA32 New OS Rewrite drivers Reuse drivers from other OS Unavailable code Undocumented features Extent of programming errors Contribution Unmodified reuse of existing device drivers Strong isolation among device drivers Fault containment Extent of collocation Related Work - Reuse Binary driver reuse – cohosting in VMware Workstation Both driver OS and VM run with all privileges!! Transplanting Uses glue Raises conflicts Leads to compromises in new OS Both driver and VM still run with all privileges Related Work – Semantic Resource Conflicts Semantic Resource Conflicts Accidental denial of service Sharing Conflicts Transplanted driver and host OS prone to each other’s faults Since driver and OS both have all privileges, cooperation is required Cooperation not possible with transplanting Device driver disables interrupts Related Work – Engineering Effort Are reused drivers functioning correctly ? Even with transplanting, 12% of OS-Kit code = glue Glue provides Ways to handle semantic differences Interface translation Donor OS knowledge required to write glue What if multiple donor OS-s ? Writing glue code is even more difficult. What if driver code in donor OS gets updated ? Related Work - Dependability User level device drivers Used with some differences Nooks Isolates drivers within protection domains No privilege isolation Complete fault isolation not possible Detection of malicious drivers not possible Adds 22,000 lines of privileged code to Linux Uses interposition services to maintain integrity of resources shared between drivers No sharing of resources between drivers in this work – uses request messages Approach Drivers are closely knit to kernel, applications are not Orthogonal drivers should be based on foll