BrickOS:面向异构硬件资源的积木式内核  

BrickOS:specialized kernels for heterogeneous hardware resources

作　　者：古金宇 李浩 夏虞斌[1] 管海兵[2] 丁佐华[3] 赵永望 陈海波[1] Jinyu GU;Hao LI;Yubin XIA;Haibing GUAN;Zuohua DING;Yongwang ZHAO;Haibo CHEN(School of Software,School of Electronic Information and Electrical Engineering,Shanghai Jiao Tong University,Shanghai 200240,China;Shanghai Key Laboratory of Scalable Computing and Systems,Shanghai Jiao Tong University,Shanghai 200240,China;School of Information Science and Technology,Zhejiang Sci-Tech University,Hangzhou 310018,China;School of Cyber Science and Technology,Zhejiang University,Hangzhou 310007,China)

机构地区：[1]上海交通大学电子信息与电气工程学院软件学院,上海200240 [2]上海交通大学上海市可扩展计算与系统重点实验室,上海200240 [3]浙江理工大学信息学院,杭州310018 [4]浙江大学网络空间安全学院,杭州310007

出　　处：《中国科学：信息科学》2024年第3期491-513,共23页Scientia Sinica(Informationis)

基　　金：国家自然科学基金重点项目(批准号:62132014);国家杰出青年科学基金项目(批准号:61925206);国家自然科学基金青年科学基金项目(批准号:62202292)资助。

摘　　要：人机物融合的新兴领域需要新型操作系统内核以支持泛在计算,对下管控海量异构硬件,对上服务动态多变应用场景.本文提出一种积木式内核架构BrickOS,可以根据使用场景灵活选择要加入内核的系统组件,同时可以选择将系统组件运行在用户态以提供较好的安全性,或者运行在共享地址空间的内核态中以提升性能.为了保障运行在相同地址空间中的系统组件的安全性,BrickOS为底层硬件的内存保护机制提供了统一的抽象,并将其用于单地址空间的内存隔离.测试结果表明BrickOS可以根据不同场景生成定制化内核,并拥有较低的进程间通信(inter-process call,IPC)开销,整体性能良好.The emerging field of human-machine-material integration requires new operating system kernels to support the ubiquitous computing,so as to manage and control massive heterogeneous hardware and serve dynamic and changeable application scenarios.This paper proposes a configurable specialized kernel architecture,named BrickOS,which can flexibly select the system components of the kernel according to the usage scenario.Developers can choose to run the system components in user mode to provide better security,or run in a sharedaddress-space kernel mode to improve performance.In order to ensure the security of system components running in the same address space,BrickOS provides a unified abstraction for the memory protection mechanism of the underlying hardware used for memory isolation in a single address space.The test results show that BrickOS can generate customized kernels that meet the requirements for different scenarios,with low inter-process call(IPC)overhead and good overall performance.

关 键 词：操作系统内核 组件编排 进程间通信 内存隔离 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论]