Safety monitor: Using Rust in mixed-criticality Linux systems
summary
Safety Monitor is an open-source Linux daemon written in Rust that runs on systemd-based distributions and aims to be usable in mixed‑criticality systems up to SIL 3 / ASIL D. It monitors SPI streams via POSIX message queues, aggregates hashes from a config hash derive macro and uses a dev watchdog interface with atomic petting handles (type‑state builders, static assertions) to avoid blocking; fault‑injection sites are derived for testing. Repo published Feb at FOSDEM on GitLab.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:09Safety standards and Rust
- 2:37Safety monitor
- 4:48Risk reduction in Rust
- 7:19Type states and builders
- 9:46Static assertions
- 11:12New types for constraints
- 13:38Macros for properties
- 14:42Blocking in critical paths
- 16:50Guarding against misuse
- 19:59Input validation
- 21:23Two-stage configuration
- 23:09Config validation
- 24:13Resource costs estimation
- 25:17Resources and project
- 26:21Q&A
related talks
45mBuilding Safe and Secure Systems in Rust
25mContinuous compliance with Rust in automotive software
19mCounterexamples in Safe Rust
59mWhat's the deal with unsafe Rust?
01h 01mMemory Safety: Rust vs. C
41mRust Meets Zephyr: Building Safer Embedded Applications
20mrust-vmm: A Security Journey
26mUnix systems programming in Rust