Viewing profile — hannesm

What you already can do is attaching gdb -- either live or at a core dump. Please see https://github.com/Solo5/solo5/blob/master/docs/debugging.md for detailed instructions ;) What…

To be a bit more precise, what we achieved so far: apart from web servers and TLS reverse proxies (with DNS-backed let's encrypt provisioning), DNS authoritative servers, a CalDAV …

good news is that MirageOS can as well be executed in a seccomp context with only 5 or 7 system calls allowed -- see the spt target of solo5 https://github.com/solo5/solo5 -- also …

Some MirageOS developers were hired/acquired by docker -- though not the (open source) project, beither the code... There's still quite some work on MirageOS itself, including repr…

Amazing how little code is needed for that, and how clear the interface is... documentation and tutorials at https://docs.osau.re/miou/

srsly it's 2022 and they only have legacy IP and no IPv6?

Yes, this is an ordinary Linux binary. The attack surface is different, you may be interested in https://archive.fosdem.org/2019/schedule/event/solo5_unikern... and/or https://arch…

MirageOS is - similar to the latest OCaml release - only using a single CPU core. You can run multiple unikernels, one on each core. If doing that, you can use Xen vchan (shared me…

Maybe https://hannes.robur.coop/Posts/Monitoring sheds some light how to monitor MirageOS unikernels ;)

We use asynchronous tasks in MirageOS (cooperative multitasking) using lwt http://ocsigen.org/lwt/latest/manual/manual , so you can serve multiple network connections at the same t…

In ancient times, only Xen was supported. Nowadays, the support moved to: - Xen (PVH) - Linux KVM, FreeBSD BHyve, OpenBSD VMM - SPT (seccomp, no hardware virtualization) - virtio (…

Highly recommend the history of English podcast, which goes deep into the topics https://historyofenglishpodcast.com/

Processes? Seriously if there's only a single one, why would you waste resources on process management and process information? Just get over it ;) http://unikernel.org https://mir…

Looks like we're on a different Interweb, works for me; and travis was a spurious reporting problem, compiles fine (and is now green just to make you happy) :)

There's https://nqsb.io - now even with a libtls.so compat layer (you can LD_PRELOAD our libnqsb-tls https://github.com/mirleft/libnqsb-tls ) Being binary compatible with libssl.so…

Have you seen unikernel approaches like MirageOS ( https://mirage.io ), which challenge the POSIX basics of operating systems? If not, take a look :)

This is similar to my experience verifying imperative code (as part of http://itu.dk/research/tomeso ): rewrite code as pure as possible (learning that mutation is premature optimi…

hmm, my other OS is MirageOS ( https://mirage.io ) -- also see https://nqsb.io contains my previous two years of work ;) I'd rather call it extensive exploration than fuzz testing …

The specification, as written in the RFC, is pretty useless... But luckily people sat down and formalised TCP/IP as spoken on the Internet (10 years ago, Linux-2.4.20/FreeBSD-4.6/W…

You have seen the network semantics research project https://www.cl.cam.ac.uk/~pes20/Netsem/index.html ? It is a formal model of TCP/IP validated with Linnux 2.4.20/FreeBSD-4.6/Win…

it is btw roughly http://nonwhiteheterosexualmalelicense.org/