A Unikernel Firewall for QubesOS - Thomas Leonard's blog

QubesOS provides a desktop operating system made up of multiple virtual machines, running under Xen. To protect against buggy network drivers, the physical network hardware is accessed only by a dedicated (and untrusted) "NetVM", which is connected to the rest of the system via a separate (trusted) "FirewallVM". This firewall VM runs Linux, processing network traffic with code written in C. In thi

[tmatsuu]

セキュリティにフォーカスしたXenベースのデスクトップ環境QubesOSの解説。あーいいね。ノートPCのベースはこれにしたい機運高まってる。日本語入力ができるのか怪しいけども。

[vanbraam]

Unikernelだけど,興味深い構造だな(図だけ眺めた)