includeos/IncludeOS
IncludeOS
IncludeOS ist ein Unikernel-Betriebssystem, das Anwendungscode zusammen mit den notwendigen Kernel-Treibern in einem einzigen bootfähigen Image bündelt. Es fungiert als ressourceneffiziente virtuelle Maschine für Cloud-Dienste und als leichtgewichtige Serverless-Laufzeitumgebung, die darauf ausgelegt ist, Speicherbedarf und Bootzeiten zu minimieren.
Das Projekt bietet eine Linux-Kompatibilitätsschicht über eine C-Bibliothek, wodurch Anwendungen, die für Linux geschrieben wurden, innerhalb der Unikernel-Umgebung kompiliert und ausgeführt werden können. Zudem dient es als Framework für Netzwerk-Appliances, um leistungsstarke Firewalls und Load Balancer mit konfigurierbaren TCP/IP-Stacks zu erstellen.
Zu den umfassenden Funktionen gehören die Erstellung minimaler Maschinen-Images für den Einsatz auf Hypervisoren wie KVM, Qemu und VMware sowie die Härtung eingebetteter IoT-Geräte durch das Unterbinden von Laufzeit-Rekonfigurationen. Das System unterstützt einen schnellen Dienststart zur Optimierung von Serverless-Kaltstarts und nutzt nicht-präemptives Scheduling, um eine vorhersagbare Latenz zu gewährleisten.
Features
- Unikernel Build Toolchains - Combines application code and minimal OS functionality at link-time to create resource-efficient unikernel virtual machines.
- Unikernels - Builds minimal bootable unikernel images that combine application code with necessary OS functions for efficient cloud deployment.
- Virtual Machines - Provides resource-efficient machine images designed to run as specialized guests on hypervisors like KVM, Qemu, and VMware.
- Minimal Runtime Footprints - Reduces initial loading latency by utilizing a minimal disk and memory footprint for rapid application startup.
- Linux Compatibility Layers - Provides a compatibility layer that allows Linux-targeted applications to be compiled and run with minimal changes.
- Unikernel Compatibility Layers - Ships a C library that allows Linux-written applications to be compiled and executed within a unikernel environment.
- Minimal Base Images - Creates small, bootable images by bundling services with a minimal operating system at link-time.
- Serverless Runtimes - Functions as a lightweight runtime environment that minimizes memory footprints and boot times for cloud workloads.
- Network Appliance Frameworks - Provides a modular system for building high-performance firewalls and load balancers with configurable TCP/IP stacks.
- Boot Sequence Bypasses - Bypasses standard operating system boot sequences to start virtualized services in milliseconds.
- C Libraries - Provides a minimal C standard library implementation to enable Linux applications to run within the unikernel environment.
- TCP/IP Stacks - Implements a configurable and modular TCP/IP stack tailored for minimal cloud services.
- Virtual Machine Image Construction - Compiles and packages service binaries into bootable disk images tailored for specific hypervisors.
- Linux Compatibility Layers - Allows existing Linux applications to run in a minimal virtualized environment using a compatibility C library.
- Integrated Security Appliances - Provides a framework for building high-performance network appliances like firewalls and load balancers.
- Kernel Image Linking - Combines application code and minimal operating system functions into a single bootable binary during the final linking phase.
- Dynamic Application Updates - Supports upgrading running services without requiring a reboot or incurring downtime.
- Hypervisor Deployment Targets - Runs as a specialized image across various hypervisors including KVM, Qemu, VirtualBox, and VMware ESXi.
- Runtime Hardening - Secures IoT hardware by preventing runtime operating system reconfiguration to protect devices in open networks.
- DMA-Capable Drivers - Implements DMA-capable drivers for network and disk I/O to maximize throughput and reduce CPU overhead.
- Single-Address-Space Operating Systems - Runs applications and system services in a shared memory space to eliminate context-switching overhead.
- Non-Preemptive Scheduling - Utilizes non-preemptive scheduling to ensure predictable latency and eliminate jitter.
- Cold Start Optimizations - Reduces serverless cold start latency by packaging application code into minimal, fast-booting images.
- IoT Security Hardening - Hardens embedded IoT devices by preventing runtime reconfiguration of the operating system.
- Network Traffic Filtering - Provides firewall capabilities to control incoming and outgoing network packets based on defined rules.
- Hypervisor Abstractions - Tailors the boot sequence and hardware abstraction layer for compatibility with various cloud hypervisors.
- Deterministic Execution Latencies - Eliminates process preemption to maintain consistent response times and minimize jitter on physical hardware.
