BluePill researcher is back, with a Xen-based client hypervisor
Do you remember Joanna Rutkowska, the security researcher behind the controversial BluePill attack against hypervisors?
The company she founded and currently controls, Invisible Things Lab, just launched an open source project dubbed Qubes.
Pitched as a new operating system, Qubes really is a client hypervisor based on Xen, which isolates multiple environment in dedicated Linux-based virtual machines.
The architecture has some interesting characteristics. For example the networking subsystem has been moved from the dom0 to a a dedicated, unprivileged VM that leverages the most modern I/O virtualization techniques (AMD IOMMU and Intel VT-d). The same thing is planned for the storage subsystem in a future release.
Additionally, all end user VMs are linked clones of the same golden image, the only one that needs to be updated.
The applications inside each VM are glued together through the seamless window capability offered by the X Window System, plus secure copy and paste and file sharing, so that the end user doesn’t necessarily have to switch between guest OSes (Fedora 12 64bit is the recommended system for Dom0).
Last but not least, in future releases, Qubes will leverage Intel Trusted Execution Technology (TXT) to secure the system boot.
Of course Invisible Things Lab has to face all the technical challenges that other vendor selling or developing client hypervisors are facing. And the list includes startups like Virtual Computer and Neocleus and leading virtualization players like Citrix and VMware (both in late because of those technical challenges).
Besides technical issues there are security-wise design issues that may partially limit the usability of this platform for some common tasks: for example the company decided to not support OpenGL primarily for security reasons and thus 3D applications won’t perform too well.
Nonetheless the alpha code just released online is already usable and the company plans to deliver a GA version within the end of 2010.
Support for Windows virtual machines may be provided at a future time through a commercial implementation of Qubes.
virtualization.info Newest articles
May 23rd, 2012
Yesterday VMware published a paper focused on VMware vMSC (vSphere Metro Storage Cluster), a new configuration within the VMware Hardware Compatibility List intended for environments where disaster/downtime avoidance is a…
May 22nd, 2012
Yesterday, during its annual conference in Las Vegas, EMC announced the acquisition of Syncplicity, a cloud-storage privately held startup founded in 2008 and based in Menlo Park, California.
Terms…
May 21st, 2012
On May 18th Oracle announced the general availability of version 3.1 of its x86 enterprise virtualization solution VM Server.
This release follows 3.0 announced on August 24th 2011.
All the new…
May 21st, 2012
In this post, published on May 18 in VROOM! Blog, the VMware’s Performance Team presented some of the most significant enhancements and optimizations brought to Teradici‘s PCoIP protocol in the…
May 17th, 2012
On May 15th NVIDIA unveiled the NVIDIA® VGX™ platform that will be available later this year through NVIDIA’s hardware OEM and VDI partners.
This new platform promises to deliver…
May 17th, 2012
Microsoft announced this week the new Beta version of its capacity planning tool Microsoft Assessment and Planning (MAP) 7.0 Beta.
The Beta program opened on May 15th and the review…
May 15th, 2012
Today VMware announced VMware vFabric Suite 5.1, expected to be generally available in Q2 2012.
vFabric Suite 5.1 includes vFabric Application Director, to automate the deployment and management of vFabric…
May 15th, 2012
On April 4 Stephen Herrod, VMware’s CTO, has attended, as guest speaker, at a VMUG meeting in Italy.
One of the key point of the speech, documented in one hour-long…
May 14th, 2012
Last week Citrix announced a new tech preview for Hosted Server VDI technology that allows cloud providers to leverage Microsoft SPLA to host VDI-style desktops obtaining a pay-as-you-go monthly subscription licensing…
May 11th, 2012
On May 7 Atlantis Computing announced the general availability of its Atlantis ILIO Diskless VDI 3.2, this product, tailored in particular for VMware View 5.1, enables virtual desktops deployment…
May 11th, 2012
On May 7 Citrix announced a technology preview of Project Aruba that extends Citrix VDI all-in-one proposal for the SMB market, VDI-in-a-Box, with personal vDisk technology.
VDI-in-a-Box, inherited from Kaviza…
May 10th, 2012
On May 7 Cloud Sidekick announced the Early Access Program release of Cato Enterprise Edition (EE) which extends the Community Edition (CE) with Storm Deployment Automation and support for…
May 9th, 2012
On April 26 VMware announced the general availability of VMware vCenter Infrastructure Navigator (VIN) 1.1, previously introduced as a part of vCenter Operations Management Suite.
VIN automatically detects, discovers and…
May 8th, 2012
On May 3 VMware released a security update, that the company itself define as “accelerated“, with the purpose to patch five “critical” security issues across VMware ESX and ESXi hypervisor…
Copyright © 2003-2012 virtualization.info. All rights reserved.
virtualization.info | cloudcomputing.info | virtualization.tv | Virtualization Congress