We understand the complexity of code and policy as the most fundamental security problem shared by modern general-purpose operating systems. Because of high functional demands and dynamic workloads, however, this complexity cannot be avoided. But it can be organized. Genode is a novel OS architecture that is able to master complexity by applying a strict organizational structure to all software components including device drivers, system services, and applications. The Genode OS framework is the effort to advance the Genode OS architecture as a community-driven Open-Source project.
- An in-depth look into the ARM virtualization extensions Mar 12, 2015
- Our new article explores the mechanisms of the ARM virtualization extensions and describes how Genode's custom base-hw kernel was turned into a microhypervisor.
- Exercising the seL4 kernel interface Mar 10, 2015
- The second part of the article series about Genode on seL4 goes into detail about the kernel mechanisms for synchronous inter-process communication and the management of virtual memory.
- Genode OS Framework release 15.02 Feb 27, 2015
- Version 15.02 extends the base-hw kernel with ARM-virtualization support, introduces a highly modularized tool kit for automated testing, adds support for the USB Armory platform, and improves the performance and stability of VirtualBox on Genode/NOVA.
- Road Map for 2015 Jan 14, 2015
- After brainstorming Genode's mid-term future on our mailing list, we finalized our road map for this year.
- Genode at FOSDEM 2015 Jan 14, 2015
- With three talks, Genode will show a strong presence at this year's FOSDEM. The talks will cover an introduction of Genode, our line of work regarding VirtualBox on NOVA, and Genode's evolving GUI architecture.
- Genode OS Framework release 14.11 Nov 28, 2014
- With the availability of the Intel wireless stack in version 14.11, we close one of the last functional gaps to use Genode on modern laptops. Further highlights of the new version are the trading of CPU resources between subsystems on top of our custom HW kernel, VirtualBox 4.3.16, a new dynamic linker, and networking on the Raspberry Pi.
VirtualBox running besides the Seoul VMM (virtual machine monitor) on top of Genode/NOVA. Seoul executes Tinycore Linux as guest OS. VirtualBox executes MS Windows 7. Both VMMs are utilizing hardware virtualization (VT-X) but are plain user-level programs with no special privileges.
Qt version 5.1 running natively on Genode 13.08.
The Webkit-based Arora webbrowser running alongside an application using Gallium3D, which was introduced with release 10.08.
The demonstration scenario provided with the official Genode distribution shows off Genode's ability to create and destroy arbitrarily shaped process trees, which can include multiple instances of services in a nested fashion. The screenshot shows an isolated instance of the GUI server running in a window of another GUI-server instance. The whole demo scenario including the graphical user interface has a source-code complexity of less than 20,000 lines of code. With Genode, graphically rich applications and a low-complexity trusted computing base are no contradiction.