Re: [RFC Patch 0/7] kernel: Introduce multikernel architecture support

--CpzOrJ/+7+dHBlWP
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Sep 24, 2025 at 01:38:31PM +0200, David Hildenbrand wrote:
> > >=20
> > > Two more points:
> > >=20
> > > 1) Security lockdown. Security lockdown transforms multikernel from
> > > "0-day means total compromise" to "0-day means single workload
> > > compromise with rapid recovery." This is still a significant improvem=
ent
> > > over containers where a single kernel 0-day compromises everything
> > > simultaneously.
> >=20
> > I don't follow. My understanding is that multikernel currently does not
> > prevent spawned kernels from affecting each other, so a kernel 0-day in
> > multikernel still compromises everything?
>=20
> I would assume that if there is no enforced isolation by the hardware (e.=
g.,
> virtualization, including partitioning hypervisors like jailhouse, pkvm e=
tc)
> nothing would stop a kernel A to access memory assigned to kernel B.
>=20
> And of course, memory is just one of the resources that would not be
> properly isolated.
>=20
> Not sure if encrypting memory per kernel would really allow to not let ot=
her
> kernels still damage such kernels.
>=20
> Also, what stops a kernel to just reboot the whole machine? Happy to learn
> how that will be handled such that there is proper isolation.

The reason I've been asking about the fault isolation and security
statements in the cover letter is because it's unclear:
1. What is implemented today in multikernel.
2. What is on the roadmap for multikernel.
3. What is out of scope for multikernel.

Cong: Can you clarify this? If the answer is that fault isolation and
security are out of scope, then this discussion can be skipped.

Thanks,
Stefan

--CpzOrJ/+7+dHBlWP
Content-Type: application/pgp-signature; name=signature.asc

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEEhpWov9P5fNqsNXdanKSrs4Grc8gFAmjT6TUACgkQnKSrs4Gr
c8glqAf/V/fg56oCmCv+HaFs3LvmQyEljhq0JJy17N25yTd+uBaKlL/RQs/qTsez
VrTtD5K5M/dKzlI9hpUM+/RzrxvYy65ZPp6CIfo1eBCRTUpmLZeUXYnZfjk/oU7A
8lL4qXt4sohUnt52FX6jT0io63SgZfzVa+ioe2WDZmh/YVkIi9JNjxhH5HJMuUPU
MxS53WDukYaEaBUJSi4cs/QdjcCudEzZBaeP1FjC6uoeZQ/3lT6Ozr0YGNeHHLUT
XRG0dL1oq9ABmi7Yy2UHwmqj+4cT2964SErwJUesi+a7ij4/ZL2osb1aurT098ZC
e75vuYwusPi8KJrYkzuXOLpAWMW6EA==
=+t3/
-----END PGP SIGNATURE-----

--CpzOrJ/+7+dHBlWP--