TY - CHAP A1 - Ramsauer, Ralf A1 - Kiszka, Jan A1 - Lohmann, Daniel A1 - Mauerer, Wolfgang T1 - Look Mum, no VM Exits! (Almost) T2 - Proceedings of the 13th Annual Workshop on Operating Systems Platforms for Embedded Real-Time Applications (OSPERT '17) N2 - Multi-core CPUs are a standard component in many modern embedded systems. Their virtualisation extensions enable the isolation of services, and gain popularity to implement mixed-criticality or otherwise split systems. We present Jailhouse, a Linux-based, OS-agnostic partitioning hypervisor that uses novel architectural approaches to combine Linux, a powerful general-purpose system, with strictly isolated special-purpose components. Our design goals favour simplicity over features, establish a minimal code base, and minimise hypervisor activity. Direct assignment of hardware to guests, together with a deferred initialisation scheme, offloads any complex hardware handling and bootstrapping issues from the hypervisor to the general purpose OS. The hypervisor establishes isolated domains that directly access physical resources without the need for emulation or paravirtualisation. This retains, with negligible system overhead, Linux's feature-richness in uncritical parts, while frugal safety and real-time critical workloads execute in isolated, safe domains. KW - FOS: Computer and information sciences KW - Operating Systems (cs.OS) Y1 - 2017 UR - https://ospert2017.uni.lu/ U6 - https://doi.org/10.48550/arXiv.1705.06932 ER - TY - GEN A1 - Ramsauer, Ralf A1 - Kiszka, Jan A1 - Mauerer, Wolfgang T1 - Spectre and Meltdown vs. Real-Time: How Much do Mitigations Cost? T2 - Embedded Linux Conference Europe 2018, October 22 - 24, 2018, Edinburgh, UK Y1 - 2018 UR - https://www.youtube.com/watch?v=nqU4j2M_Ul4 ER - TY - GEN A1 - Ramsauer, Ralf A1 - Kiszka, Jan A1 - Mauerer, Wolfgang T1 - Building Mixed Criticality Linux Systems with the Jailhouse Hypervisor T2 - Embedded Lunux Conference + OpenIoTSummit, Portland, OR, 21.-23.02.2017 N2 - The partitioning hypervisor Jaihouse allows us to run safety critical and uncritical applications in parallel on a single SoC. We present our experiences when porting a safety and real-time critical existing application as a Jailhouse guest. It shows a novel and promising approach for implementing mixed-criticality applications with real-time requirement while not loosing the benefits of Linux. This is done by static partitioning of hardware resources; guests do not interfere. We will present a multicopter platform running the real-time critical flight stack in an isolated Jailhouse guest. This proves the practicability of Jailhouse as well as the suitability for real-time safety critical systems by porting an existing application to a Jailhouse cell. We stress its concept and show up current hardware limitations, like undesired behaviour and present possible workarounds and solutions. Y1 - 2017 UR - https://www.youtube.com/watch?v=pvs0fv-gnvw ER - TY - GEN A1 - Ramsauer, Ralf A1 - Kiszka, Jan A1 - Lohmann, Daniel A1 - Mauerer, Wolfgang T1 - Implementierung gemischt kritischer Systeme durch statische Hardwarepartitionierung T2 - Frühjahrstreffen der Fachgruppen Betriebssysteme, Hannover, 2. März 2018 Y1 - 2018 UR - https://www.betriebssysteme.org/wp-content/uploads/2018/04/fgbs18-169.pdf ER - TY - CHAP A1 - Ramsauer, Ralf A1 - Kiszka, Jan A1 - Mauerer, Wolfgang ED - Keil, Sophia ED - Lasch, Rainer ED - Lindner, Fabian ED - Lohmer, Jacob T1 - A Novel Software Architecture for Mixed Criticality Systems T2 - Digital Transformation in Semiconductor Manufacturing: Proceedings of the 1st and 2nd European Advances in Digital Transformation Conference, EADTC 2018, Zittau, Germany and EADTC 2019, Milan, Italy N2 - The advent of multi-core CPUs in nearly all embedded markets has prompted an architectural trend towards combining safety critical and uncritical software on single hardware units. We present a novel architecture for mixed criticality systems based on Linux that allows us to consolidate critical and uncritical parts onto a single hardware unit. CPU virtualisation extensions enable strict and static partitioning of hardware by direct assignment of resources, which allows us to boot additional operating systems or bare metal applications running aside Linux. The hypervisor Jailhouse is at the core of the architecture and ensures that the resulting domains may serve workloads of different criticality and can not interfere in an unintended way. This retains Linux’s feature-richness in uncritical parts, while frugal safety and real-time critical applications execute in isolated domains. Architectural simplicity is a central aspect of our approach and a precondition for reliable implementability and successful certification. While standard virtualisation extensions provided by current hardware seem to suffice for a straight forward implementation of our approach, there are a number of further limitations that need to be worked around. This paper discusses the arising issues, and evaluates the suitability of our approach for real-world safety and real-time critical scenarios. Y1 - 2020 U6 - https://doi.org/10.1007/978-3-030-48602-0_11 SP - 121 EP - 128 PB - Springer International Publishing CY - Cham ER - TY - INPR A1 - Ramsauer, Ralf A1 - Huber, Stefan A1 - Schwarz, Konrad A1 - Kiszka, Jan A1 - Mauerer, Wolfgang T1 - Static Hardware Partitioning on RISC-V - Shortcomings, Limitations, and Prospects N2 - On embedded processors that are increasingly equipped with multiple CPU cores, static hardware partitioning is an established means of consolidating and isolating workloads onto single chips. This architectural pattern is suitable for mixed-criticality workloads that need to satisfy both, real-time and safety requirements, given suitable hardware properties. In this work, we focus on exploiting contemporary virtualisation mechanisms to achieve freedom from interference respectively isolation between workloads. Possibilities to achieve temporal and spatial isolation-while maintaining real-time capabilities-include statically partitioning resources, avoiding the sharing of devices, and ascertaining zero interventions of superordinate control structures. This eliminates overhead due to hardware partitioning, but implies certain hardware capabilities that are not yet fully implemented in contemporary standard systems. To address such hardware limitations, the customisable and configurable RISC-V instruction set architecture offers the possibility of swift, unrestricted modifications. We present findings on the current RISC-V specification and its implementations that necessitate interventions of superordinate control structures. We identify numerous issues adverse to implementing our goal of achieving zero interventions respectively zero overhead: On the design level, and especially with regards to handling interrupts. Based on micro-benchmark measurements, we discuss the implications of our findings, and argue how they can provide a basis for future extensions and improvements of the RISC-V architecture. Y1 - 2022 U6 - https://doi.org/10.48550/arXiv.2208.02703 ER - TY - JOUR A1 - Weber, Karsten A1 - Dendorfer, Sebastian A1 - Süß, Franz A1 - Kubowitsch, Simone A1 - Schratzenstaller, Thomas A1 - Haug, Sonja A1 - Mohr, Christa A1 - Kiesl, Hans A1 - Drechsler, Jörg A1 - Westner, Markus A1 - Kobus, Jörn A1 - Schubert, Martin J. W. A1 - Zenger, Stefan A1 - Pietsch, Alexander A1 - Weiß, Josef A1 - Hinterseer, Sebastian A1 - Schieck, Roland A1 - Scherzinger, Stefanie A1 - Klettke, Meike A1 - Ringlstetter, Andreas A1 - Störl, Uta A1 - Bissyandé, Tegawendé F. A1 - Seeburger, Achim A1 - Schindler, Timo A1 - Ramsauer, Ralf A1 - Kiszka, Jan A1 - Kölbl, Andreas A1 - Lohmann, Daniel A1 - Mauerer, Wolfgang A1 - Maier, Johannes A1 - Scorna, Ulrike A1 - Palm, Christoph A1 - Soska, Alexander A1 - Mottok, Jürgen A1 - Ellermeier, Andreas A1 - Vögele, Daniel A1 - Hierl, Stefan A1 - Briem, Ulrich A1 - Buschmann, Knut A1 - Ehrlich, Ingo A1 - Pongratz, Christian A1 - Pielmeier, Benjamin A1 - Tyroller, Quirin A1 - Monkman, Gareth J. A1 - Gut, Franz A1 - Roth, Carina A1 - Hausler, Peter A1 - Bierl, Rudolf A1 - Prommesberger, Christian A1 - Ławrowski, Robert Damian A1 - Langer, Christoph A1 - Schreiner, Rupert A1 - Huang, Yifeng A1 - She, Juncong A1 - Ottl, Andreas A1 - Rieger, Walter A1 - Kraml, Agnes A1 - Poxleitner, Thomas A1 - Hofer, Simon A1 - Heisterkamp, Benjamin A1 - Lerch, Maximilian A1 - Sammer, Nike A1 - Golde, Olivia A1 - Wellnitz, Felix A1 - Schmid, Sandra A1 - Muntschick, Claudia A1 - Kusterle, Wolfgang A1 - Paric, Ivan A1 - Brückl, Oliver A1 - Haslbeck, Matthias A1 - Schmidt, Ottfried A1 - Schwanzer, Peter A1 - Rabl, Hans-Peter A1 - Sterner, Michael A1 - Bauer, Franz A1 - Steinmann, Sven A1 - Eckert, Fabian A1 - Hofrichter, Andreas ED - Baier, Wolfgang T1 - Forschungsbericht 2017 T3 - Forschungsberichte der OTH Regensburg - 2017 KW - Forschung KW - Forschungsbericht Y1 - 2017 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:898-opus4-13835 SN - 978-3-9818209-3-5 CY - Regensburg ER -