includeos/IncludeOS
IncludeOS
IncludeOS est un système d'exploitation unikernel qui regroupe le code applicatif avec uniquement les pilotes noyau nécessaires dans une image amorçable unique. Il fonctionne comme une machine virtuelle cloud économe en ressources et un environnement d'exécution serverless léger, conçu pour minimiser l'empreinte mémoire et les temps de démarrage.
Le projet fournit une couche de compatibilité Linux via une bibliothèque C, permettant aux applications écrites pour Linux d'être compilées et exécutées dans l'environnement unikernel. Il sert également de framework d'appliance réseau pour construire des pare-feux et des répartiteurs de charge haute performance en utilisant des piles TCP/IP configurables.
Ses capacités incluent la création d'images machine minimales pour un déploiement sur des hyperviseurs tels que KVM, Qemu et VMware, ainsi que le durcissement de périphériques IoT embarqués en empêchant toute reconfiguration à l'exécution. Le système prend en charge un démarrage rapide des services pour optimiser les démarrages à froid serverless et utilise une planification non préemptive pour maintenir une latence prévisible.
Features
- Unikernel Build Toolchains - Combines application code and minimal OS functionality at link-time to create resource-efficient unikernel virtual machines.
- Unikernels - Builds minimal bootable unikernel images that combine application code with necessary OS functions for efficient cloud deployment.
- Virtual Machines - Provides resource-efficient machine images designed to run as specialized guests on hypervisors like KVM, Qemu, and VMware.
- Minimal Runtime Footprints - Reduces initial loading latency by utilizing a minimal disk and memory footprint for rapid application startup.
- Linux Compatibility Layers - Provides a compatibility layer that allows Linux-targeted applications to be compiled and run with minimal changes.
- Unikernel Compatibility Layers - Ships a C library that allows Linux-written applications to be compiled and executed within a unikernel environment.
- Minimal Base Images - Creates small, bootable images by bundling services with a minimal operating system at link-time.
- Serverless Runtimes - Functions as a lightweight runtime environment that minimizes memory footprints and boot times for cloud workloads.
- Network Appliance Frameworks - Provides a modular system for building high-performance firewalls and load balancers with configurable TCP/IP stacks.
- Boot Sequence Bypasses - Bypasses standard operating system boot sequences to start virtualized services in milliseconds.
- C Libraries - Provides a minimal C standard library implementation to enable Linux applications to run within the unikernel environment.
- TCP/IP Stacks - Implements a configurable and modular TCP/IP stack tailored for minimal cloud services.
- Virtual Machine Image Construction - Compiles and packages service binaries into bootable disk images tailored for specific hypervisors.
- Linux Compatibility Layers - Allows existing Linux applications to run in a minimal virtualized environment using a compatibility C library.
- Integrated Security Appliances - Provides a framework for building high-performance network appliances like firewalls and load balancers.
- Kernel Image Linking - Combines application code and minimal operating system functions into a single bootable binary during the final linking phase.
- Dynamic Application Updates - Supports upgrading running services without requiring a reboot or incurring downtime.
- Hypervisor Deployment Targets - Runs as a specialized image across various hypervisors including KVM, Qemu, VirtualBox, and VMware ESXi.
- Runtime Hardening - Secures IoT hardware by preventing runtime operating system reconfiguration to protect devices in open networks.
- DMA-Capable Drivers - Implements DMA-capable drivers for network and disk I/O to maximize throughput and reduce CPU overhead.
- Single-Address-Space Operating Systems - Runs applications and system services in a shared memory space to eliminate context-switching overhead.
- Non-Preemptive Scheduling - Utilizes non-preemptive scheduling to ensure predictable latency and eliminate jitter.
- Cold Start Optimizations - Reduces serverless cold start latency by packaging application code into minimal, fast-booting images.
- IoT Security Hardening - Hardens embedded IoT devices by preventing runtime reconfiguration of the operating system.
- Network Traffic Filtering - Provides firewall capabilities to control incoming and outgoing network packets based on defined rules.
- Hypervisor Abstractions - Tailors the boot sequence and hardware abstraction layer for compatibility with various cloud hypervisors.
- Deterministic Execution Latencies - Eliminates process preemption to maintain consistent response times and minimize jitter on physical hardware.
