xOS: The End Of The Process-Thread Duo Reign

Alain Tchana (1) , Dorian Goepp (1) , Stella Bitchebe (2) , Renaud Lachaize (1)

1 ERODS - Efficient and Robust Distributed Systems
2 McGill University = Université McGill [Montréal, Canada]

Process and Thread are first-order abstractions of the operating system (OS), whose implementation is wired into the OS core. Several research works have shown the inadequacy of these two main abstractions for modern isolation needs, leading to the introduction of additional abstractions with new isolation and communication features. Despite their usefulness, these new proposals are introduced in a somewhat ad-hoc manner, compromising their broad and consensual adoption. This position paper presents xOS, an OS design that does not introduce yet another first-class isolation abstraction but instead investigates how the OS can help application programmers, libraries, and OS developers integrate and easily use new abstractions. To our knowledge, xOS is the first work in this area. Similar to file system development built around a Virtual File System (VFS), xOS introduces the concept of Isolation Context (IC), which should be the unique first-class abstraction wired into the OS core. ICs can be realized in several pluggable Isolation Context Factories (ICFs) such as ProcessFactory (provides processes), Thread-Factory (provides threads), Docker Engine (provides Docker containers), KVM (provides KVM virtual machines), Wasp (provides virtines), etc. We discuss our plan to redesign a general-purpose OS from these foundations, the required APIs, and how to support new and legacy applications.

Mots clés: Operating Systems Security Isolation Concurrency; Operating Systems; Security; Isolation; Concurrency

Domaines: Informatique [cs]

Alain Tchana, Dorian Goepp, Stella Bitchebe, Renaud Lachaize. xOS: The End Of The Process-Thread Duo Reign. APSys '23: 14th ACM SIGOPS Asia-Pacific Workshop on Systems, Aug 2023, Seoul, South Korea. pp.1-8, ⟨10.1145/3609510.3609817⟩. ⟨hal-04191367⟩