Building a VMM in Rust for the Edge
summary
A Rust VMM designed for edge use cases focuses on memory safety and performance and reuses rust-vmm components to implement Cloud Hypervisor which runs on KVM and MSHV and supports x86_64 and aarch64. Features include live migration and snapshot, NUMA control, PCI passthrough for near‑native device performance, dynamic CPU and memory resizing via ACPI and virtio balloon, an HTTP API from Firecracker, per‑thread seccomp filters, SGX and experimental TDX, and a minimal EFI boot firmware plus vfio-user experimental support.
AI-written summary · about
chapters (23)
- 0:00VMM in Rust for Edge
- 0:50Security in virtualization
- 3:03Type 1 vs Type 2 hypervisors
- 4:26Rust for security & performance
- 6:33rust-vmm core components
- 8:18Edge use cases pet vs cattle virtual machines
- 12:11Cloud Hypervisor overview
- 13:33Cloud Hypervisor design
- 15:59Security via minimal emulation
- 17:26Hypervisor flexibility & support
- 19:13Guest OS & migration
- 21:21NUMA for performance
- 22:25Direct device assignment
- 24:10Dynamic VM resizing
- 26:21Cloud Hypervisor management
- 28:11Confidential computing (SGX/TDX)
- 29:57Security with seccomp
- 31:00Virtio devices in Cloud Hypervisor
- 33:07Virtio-user flexibility
- 35:17VFIO-user for legacy devices
- 37:03Cloud Hypervisor features
- 38:49Rust Hypervisor Firmware
- 42:09Resources & involvement
related talks
12mRust-vmm Status Report
24mCloud-hypervisor: A new choice for virtual machine monitor
20mrust-vmm: A Security Journey
11mBuild your own virtual machine with /dev/kvm and Rust!
05mKeynote: Modernizing Virtualization Technology for Cloud Native Computing
23mRust in Edge Computing: Enhance Performance & Security
45mSecuring Confidential VMs with COCONUT-SVSM
22mHypervisor-less Virtio for Real-time and Safety