APRON: Authenticated and Progressive System Image Renovation
summary
APRON performs authenticated, progressive repair of a corrupt or outdated system image by verifying each requested block in-kernel with a signed Merkle hash tree, fetching and verifying missing blocks from a trusted server, and replacing them on demand while a low-priority background thread eventually renovates the rest. It uses a minimal boot "cleanliness" environment, kernel-level storage interposition, and background prefetch and deduplication; evaluation shows up to 28× shorter downtime, ~9% runtime overhead during renovation and ~0.01% after completion.
AI-written summary · about
chapters (12)
- 0:00APRON introduction and corruption
- 3:56Traditional recovery limits
- 6:20APRON recovery key ideas
- 8:49Metadata storage in APRON
- 11:15On-demand recovery process
- 13:00Background prefetching for speed
- 14:09Deduplication recovery optimization
- 15:53Evaluation setup and testing
- 16:56Downtime vs full recovery
- 18:00Runtime overhead during recovery
- 19:30Renovation time and network impact
- 20:13Summary of APRON benefits
related talks
05mProject Lightning Talk: Project Copacetic
49mGeneric System for Safe Rootfs/Kernel Upgrades without Single-Point of Failure
41mDelta Updates: Making Updates Leaner
45mBehind the Scenes of an Update Framework: RAUC
41mRAUC: (R)evolution of an Update Framework
52mSurviving in the Wilderness: Integrity Protection and System Update
43mOTA Updates in the Wild: Lessons from the Field- 41mDelta Updates: Making Updates Leaner