Genode

Short description: Free and open-source software operating system

Genode

The desktop system Sculpt based on Genode

Developer| Genode Labs
Written in| properties
Source model| Open source
Initial release| 2008; 18 years ago (2008)
Repository| `{{URL|example.com|optional display text}}`
Marketing target| Desktop computers
Embedded systems

| language = English | update model = | package manager = | working state = Current | supported platforms = ARM, RISC-V,[1] x86, x86-64[2] | kernel type = Microkernel | userland = Genode, POSIX | ui = | license = AGPL-3.0-only and commercial | preceded by = | succeeded by = | website = `{{URL|example.com|optional display text}}` }}

Genode is a free and open-source software operating system (OS) framework consisting of a microkernel abstraction layer and a set of user space components.[3][4][5] The framework is notable as one of the few open-source operating systems not derived from a proprietary OS, such as Unix. The characteristic design philosophy is that a small trusted computing base is of primary concern in a security-oriented OS.

Genode can be used as a basis for a desktop computer[6][7] or tablet[8] OS or as a virtual machine monitor for guest operating systems. The framework has been used as a trusted component of secure virtualization systems for both x86[9] and ARM.[10]

The small codebase of Genode makes it a flexible alternative to more complex Unix-derived operating systems. For this reason the framework has been used as a base system for research in such fields as virtualization,[11] inter-process communication,[12] IP stack isolation,[13][14] monitoring,[15] and software development.[16][17]

## Contents

* 1 History
* 2 Releases
* 3 Architectural features
* 4 Criticism
* 4.1 C++
* 4.2 XML
* 4.3 Local namespacing
* 5 Sculpt
* 6 See also
* 7 References
* 8 External links

## History

Genode was first conceived as the Bastei OS Architecture[18] research report at the Technical University of Dresden (TU Dresden). The focus of the report was to determine the practicality of a component-based OS using capability-based security. This report was motivated in part by research into L4 microhypervisors[19] conducted during the same time. Following the success of an early prototype, the authors of the report founded the company Genode Labs to develop Bastei as the Genode OS Framework.

## Releases

The project is developed publicly as an open source project released under the terms of the GNU Affero General Public License with a commercial entity offering alternative licensing. Releases are scheduled at three-month intervals to make changes to the system application binary interface (ABI), application programming interface (API), and issue documentation. The OS framework is available in source code form and following the 18.02 release a general purpose derivative named Sculpt is provided with on-target binary deployment.

## Architectural features

Genode builds on the general philosophy of microkernels: the smaller and simpler the code, the easier it is to verify for trustworthiness and correctness. Genode extends this philosophy to user space by composing complex applications from small components. Each component exists in a strict hierarchy of parent-child relationships. Any component acting as a parent may apply resource and inter-process communication (IPC) access policies to its children. This hierarchical system layout yields intuitive partitioning and privilege deescalation as specialized subsystems are nested within more general subsystems, mitigating the confused deputy problem endemic to centralized or superuser system policy.

The framework is designed to be hosted by microkernels, however the features of any given microkernel fall mostly within a common set, and monolithic kernels implement a superset of those features. Abstracting these features allows Genode to act as user space for a variety of L4 microkernels,[20][21] and Linux.

## Criticism

### C++

Genode is often criticized for the choice of its implementation language, C++ (a few other operating systems implemented in C++ include BeOS, Fuchsia, Ghost, Haiku, IncludeOS, OSv, Palm OS, ReactOS, SerenityOS, Syllable, and Symbian). This critique usually asserts that C++ is a poor choice for implementing system libraries and APIs because of the inherent complexity of C++ and the difficulty in analyzing code for correct behavior. While Genode does make use of multiple inheritance and templates in its system library, the use of the C++ Standard Library is not allowed and language features that rely on implicit global state, such as thread-local storage and the global allocator, have been removed from the language runtime.[22] Comprehensive static analysis of C++ is not possible. However, the Genode project publishes unit tests for empirical analysis.

### XML

Genode components consume and publish state using structured data serialized in XML, in contrast to the plain text model of Unix derivatives. The Genode framework makes use of XML in effectively all of its components because XML is easily parsed and generated programmatically while still being possible to understand and edit manually.

### Local namespacing

Genode lacks any practical global namespace; there is no global file system or registry of processes or IPC endpoints. This is in contrast to systems such as Unix which feature a ubiquitous file system and allow a superuser context to arbitrarily manage any process within the system. Explicitly declaring the permissions and routing of components may be perceived as labor-intensive relative to Unix. However, compartmentalizing administration allows subsystems to be managed by mutually untrusted system administrators on the same machine without resorting to virtualizing, a common isolation method.

## Sculpt

The Genode project publishes a desktop operating system named Sculpt that targets contemporary consumer laptops.[23] Sculpt is a small base system with automatic device detection and configuration, some GUI control interfaces, and frontends to the Genode package manager. The system does not feature a full desktop environment, but requires users to deploy virtual machines hosting traditional OSes for a fully featured desktop. Sculpt is distinguished from the Genode operating system framework in that it relies heavily on dynamic reconfiguration using privileged control components in contrast to specialized systems with static policies.

## See also

* HelenOS, a desktop microkernel based operating system
* QNX, a proprietary Unix-like operating system hosted by a microkernel
* Qubes OS, a desktop operating system that provides security through virtualization
* Capability-based security
* Secure by default

## References

1. ↑ "Genode OS adds RISC-V support". https://www.rambus.com/blogs/genode-os-adds-risc-v-support-2/.
2. ↑ Larabel, Michael. "Genode Is Developing A GPU Multiplexer For Intel Graphics Hardware". https://www.phoronix.com/scan.php?page=news_item&px=Genode-GPU-Multiplexer.
3. ↑ "Introduction of the Genode OS Framework". https://archive.fosdem.org/2012/schedule/event/microkernel_intro_genode.html.
4. ↑ "L4 Based Operating Systems". http://l4hq.org/projects/os/.
5. ↑ Larabel, Michael. "Redox OS, MINIX, Hurd & Genode Had Their Time at FOSDEM Too". https://www.phoronix.com/scan.php?page=news_item&px=FOSDEM-2017-Other-OSes.
6. ↑ Baader, Hans-Joachim. "Genode 2018.2 mit Sculpt OS". http://www.pro-linux.de/news/1/25685/genode-20182-mit-sculpt-os.html.
7. ↑ Larabel, Michael. "Sculpt Aims to Be a General-Purpose OS Built Atop Genode". https://www.phoronix.com/scan.php?page=news_item&px=Sculpt-OS.
8. ↑ Tarasikov, Alexander (2013-05-11). "Porting Genode to commercial hardware". Blogger. https://allsoftwaresucks.blogspot.com/2013/05/porting-genode-to-commercial-hardware.html.
9. ↑ "Muen: An x86/64 Separation Kernel for High Assurance". https://muen.codelabs.ch/.
10. ↑ Williams, John. "Inspecting data from the safety of your trusted execution environment". https://www.blackhat.com/docs/ldn-15/materials/london-15-Williams-Inspecting-Data-From-The-Safety-Of-Your-Trusted-Execution-Environment-wp.pdf.
11. ↑ "Embassies: Radically Refactoring the Web". USENIX. https://www.usenix.org/system/files/conference/nsdi13/nsdi13-final85.pdf.
12. ↑ Wegner, Martin; Holthusen, Sönke (2014-12-11). "Contract Specification and language". http://ccc-project.org/december-11th-2014-contract-specification-and-language/.
13. ↑ Hamad, Mohammad (2016-01-06). "The Secure Communication Module of CCC". http://ccc-project.org/january-11th-2016-the-secure-communication-module-of-ccc/.
14. ↑ Hamad, Mohammad. "A communication framework for distributed access control in microkernel-based systems". https://www.cs.hs-rm.de/~kaiser/events/ospert16/pdf/ospert16-p6.pdf.
15. ↑ Pruthiviraj, B.; Madhusuthun, G.S.; Vijayasarathy, S.; Chakrapani, K.. "A Microkernel Based Secure Operating System Using Genode Framework". http://www.jatit.org/volumes/Vol38No2/9Vol38No2.pdf.
16. ↑ Hähne, Ludwig. "Empirical Comparison of SCons and GNU Make". http://www.genode-labs.com/publications/scons-vs-make-2008.pdf.
17. ↑ Millo-Sánchez, Reinier; Paz Rodríguez, Waldo; Fajardo-Moya, Alexis. "Genode OS Framework, un framework para el desarrollo de sistemas embebidos". https://www.researchgate.net/publication/283506872.
18. ↑ "TU Dresden technical report TUD-FI06-07". http://os.inf.tu-dresden.de/papers_ps/bastei_design.pdf.
19. ↑ "NOVA Microhypervisor". http://hypervisor.org/.
20. ↑ "L4 Based Operating Systems". http://l4hq.org/projects/os/.
21. ↑ "SeL4 Community Projects". https://docs.sel4.systems/CommunityProjects.
22. ↑ "Genode's Conscious C++ dialect". https://genodians.org/nfeske/2019-01-22-conscious-c++.
23. ↑ "Release notes 18.02". https://genode.org/documentation/release-notes/18.02#Sculpt_for_Early_Adopters.

## External links

| Wikimedia Commons has media related to Genode.

|

Official websites

* on GitHub

Research projects

* KV-Cache: A Scalable High-Performance Web-Object Cache for Manycore
* TrApps: Secure Compartments in the Evil Cloud
* Development of an Embedded Platform for Secure CPS Services
* Secure-OS project of IIT Madras
* Kernel isolation of a Capability-based security Operating System
* Mobile Device Security with ARM TrustZone

* v
* t
* e

Microkernels-nanokernels

Kernels|

* ADEOS
* EPOC
* EKA1
* EKA2
* Eumel
* Exec
* ExecSG
* EROS
* K42
* L3
* L4
* Little Kernel
* Mac OS nanokernel
* Mach
* GNU Mach
* MicroEmpix
* µ-velOSity
* nucleus
* NuKernel
* Off++
* Opus
* PowerUP
* Quark
* TI-RTOS kernel
* Vanguard
* WarpOS
* Zircon

Operating
systems|

* AmigaOS
* Amoeba
* AROS
* AspireOS
* Broadway
* Icaros Desktop
* ARX
* BeRTOS
* ChibiOS/RT
* ChorusOS
* Copland
* Cosmos
* EROS
* FreeRTOS
* Fuchsia
* Genode
* GNOSIS
* GNU Hurd
* HelenOS
* Hydra
* Integrity
* JX
* JavaOS
* KeyKOS
* Lites
* Classic Mac OS (PowerPC kernel)
* MachTen
* MacMach
* MeikOS
* MERT
* µC/OS
* Midori
* MINIX
* Minix-vmd
* MINIX 3
* MkLinux
* MorphOS
* MQX
* NLTSS
* Nucleus RTOS
* NuttX
* OS2000
* OSE
* Phantom OS
* PikeOS
* QNX
* RC 4000
* Redox
* REX OS
* RIOT
* SharpOS
* Singularity
* SPIN
* Spring
* Symbian
* Taligent OS
* ThreadX
* TI-RTOS
* Tinix
* UNICOS
* V
* Verve
* VRTX
* VSTa
* Wombat OS
* Workplace OS
* Zephyr

* v
* t
* e

Object-capability security

Concepts|

* Principle of least authority (POLA)
* Confused deputy problem
* Ambient authority
* File descriptor
* C-list
* Object-capability model
* Capability-based security
* Capability-based addressing
* Zooko's triangle
* Petnames

OS kernels|

* Hydra
* NLTSS
* KeyKOS
* EROS
* CapROS
* iMAX 432
* Midori
* seL4
* Genode
* Fuchsia

Programming languages|

* Joule
* E
* Joe-E
* Cajita

Filesystems|

* Tahoe-LAFS

Specialised hardware|

* Plessey System 250
* Cambridge CAP
* IBM System/38
* Intel iAPX 432

0.00

(0 votes)

Original source: https://en.wikipedia.org/wiki/Genode. Read more

|

Retrieved from "https://handwiki.org/wiki/index.php?title=Software:Genode&oldid=790940"
*[v]: View this template
*[t]: Discuss this template
*[e]: Edit this template