Search Results for "kernel-br"

This repository contains a collection of tools and commands used for managing the lifecycle of enclaves. The Nitro CLI needs to be installed on the parent instance, and it can be used to start, manage, and terminate enclaves. The Nitro Enclaves kernel driver is available in the upstream Linux kernel starting with the v5.10 kernel for x86_64 and starting with the v5.16 kernel for arm64. The codebase from the 'drivers/virt/nitro_enclaves' directory in this GitHub repository is similar to the one merged into the upstream Linux kernel. The enclaves do not have access to a physical disk, just a RAM filesystem. ...

...The design emphasizes interoperability across different integration layers, describing a separation between “North” shims (how apps or runtimes plug in) and “South” platforms (where the sandbox runs), which helps the system adapt to multiple deployment contexts. A key aspect of the project is that it targets both kernel-mode and user-mode scenarios, enabling experimentation with different trust and performance tradeoffs. The repository positions LiteBox as a foundation for building hardened execution environments where untrusted or semi-trusted components can run with reduced privileges and a minimized host interface.

Kata Containers is an open source container runtime, building lightweight virtual machines that seamlessly plug into the container ecosystem. Kata Containers is an open source community working to build a secure container runtime with lightweight virtual machines that feel and perform like containers, but provide stronger workload isolation using hardware virtualization technology as a second layer of defense. Since launching in December 2017, the community successfully merged the best parts...

Aurae is on a mission to be the most loved and effective way of managing workloads on a node. Our hope is that by bringing a better set of controls to a node, we can unlock brilliant higher-order distributed systems in the future. Aurae deploys a memory-safe 1 runtime daemon, process manager, and PID-1 initialization system to remotely schedule processes, containers, and virtual machines as well as set node configurations (e.g., networking storage). Through system proportioning and...

Roa is an async web framework inspired by koajs, lightweight but powerful.

Glommio (pronounced glo-mee-jow or |glomjəʊ|) is a Cooperative Thread-per-Core crate for Rust & Linux based on io_uring. Like other Rust asynchronous crates, it allows one to write asynchronous code that takes advantage of Rust async/await, but unlike its counterparts, it doesn't use helper threads anywhere.