{"id":120219,"date":"2024-10-18T13:09:06","date_gmt":"2024-10-18T11:09:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-otkryl-kod-gipervizora-openvmm-i-platformy-paravirtualizaczii-openhcl"},"modified":"2024-10-18T13:09:06","modified_gmt":"2024-10-18T11:09:11","slug":"microsoft-otkryl-kod-gipervizora-openvmm-i-platformy-paravirtualizaczii-openhcl","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/microsoft-otkryl-kod-gipervizora-openvmm-i-platformy-paravirtualizaczii-openhcl","title":{"rendered":"Microsoft has opened the source code of the OpenVMM hypervisor and the OpenHCL paravirtualization platform.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Microsoft has announced the opening of the source codes for the paravirtualization layer OpenHCL and the OpenVMM virtual machine monitor, specifically developed for the operation of OpenHCL. The OpenVMM and OpenHCL code is written in Rust and is distributed under the MIT license. OpenVMM belongs to type-2 hypervisors operating in the same protection ring as the operating system's kernel, akin to products like VirtualBox and VMware Workstation. It supports operation on host systems based on Linux (x86_64), Windows (x86_64, Aarch64), and macOS (x86_64, Aarch64), utilizing the virtualization APIs provided by these operating systems, including KVM, SHV (Microsoft Hypervisor), WHP (Windows Hypervisor Platform), and Hypervisor.framework.     <\/p>\n<p>Among the features supported in OpenVMM:   <\/p>\n<ul>\n<li class=\"l\"> Booting in UEFI and BIOS modes, direct booting of the Linux kernel;\n<li class=\"l\"> Support for paravirtualization based on Virtio drivers (virtio-fs, virtio-9p, virtio-net, virtio-pmem)\n<li class=\"l\">  Support for paravirtualization based on VMBus (storvsp, netvsp, vpci, framebuffer);\n<li class=\"l\"> Emulation of vTPM, NVMe, UART, i440BX + PIIX4 chipset, IDE HDD, PCI, and VGA;\n<li class=\"l\"> Backends for graphics passthrough, input devices, console, storage, and network access;\n<li class=\"l\"> Management via command line interface, interactive console, gRPC, and ttrpc.  <\/ul>\n<p>OpenHCL is positioned as an environment with paravirtualization components (paravisor) operating atop the OpenVMM hypervisor. A key feature of virtualization systems based on OpenVMM and OpenHCL is that paravirtualization components run not on the host system side but in a single virtual machine alongside the guest system. The isolation of the paravirtualization layer from the guest operating system is ensured by the second-level hypervisor OpenVMM. In this application, OpenHCL can be viewed as virtual firmware operating at a higher privilege level than the operating system running in the guest environment.            <\/p>\n<p> The separation of the guest system and OpenHCL components is implemented using the concept of Virtual Trust Levels (VTL), for which both software mechanisms and hardware technologies can be used, such as Intel TDX (Trust Domain Extensions), AMD SEV-SNP (Secure Encrypted Virtualization-Secure Nested Paging), and ARM CCA (Confidential Compute Architecture). To run OpenHCL components, a stripped-down version of the Linux kernel is used, including only the minimally necessary components for OpenVMM operation.    <center><img decoding=\"async\" alt=\"Microsoft has opened the source code of the OpenVMM hypervisor and the OpenHCL paravirtualization platform.\" src=\"\/wp-content\/uploads\/2024\/10\/e998f3109604aad0946a76e3fc7d5233.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>OpenHCL can operate on x86-64 and ARM64 platforms, and supports Intel TDX, AMD SEV-SNP, and ARM CCA extensions for additional isolation. OpenHCL includes a set of services, drivers, and emulators used to organize access to hardware, ensure the operation of virtual devices on the guest system side, and emulate hardware devices (for instance, a chip for storing cryptographic keys can be emulated \u2014 vTPM).     <\/p>\n<p>To translate access to hardware on the guest system side, existing drivers with paravirtualization support are used, or direct device binding to the virtual machine can be performed, allowing existing guest systems to be moved to an OpenHCL-based environment without modifications. Additionally, OpenHCL includes components for diagnostics and debugging <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/en\/vps\/\"   title=\"of virtual machines\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2180\">of virtual machines<\/a>, performed using extensions to ensure confidential computing.    <\/p>\n<p>Unlike the existing open project COCONUT-SVSM (Secure VM Service Module), which provides services and emulated devices for guest systems running in a confidential <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/en\/vps\/abuzoustojchivye-vps\/\"   title=\"virtual machines\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4290\">virtual machines<\/a> (CVM, Confidential Virtual Machine), OpenHCL allows the use of standard interfaces in guest systems, while COCONUT-SVSM requires special interaction with SVSM, modifications to the guest system, and the use of separate drivers.      <\/p>\n<p>The applications of the OpenHCL paravirtualization include scenarios such as migrating existing systems to utilize Azure Boost hardware accelerators without the need for changes to the guest system disk image; running existing guest systems on virtual machines that provide confidential computing (e.g., based on Intel TDX and AMD SEV-SNP); facilitating verified boot of virtual machines using UEFI Secure Boot mode and vTPM.    <\/p>\n<p>It is specifically noted that the OpenVMM project is focused on use with OpenHCL and is not yet ready for standalone application on host systems for practical end-user deployments. Issues with OpenVMM that hinder its use in traditional host environments, outside of its integration with OpenHCL, include: poor documentation of the management interface; lack of proper performance optimization for storage, networking, and graphics backends; absence of support for certain drivers (e.g., IDE disks and PS\/2 mice); and no guarantee of API stability and functionality. However, the integration of OpenVMM and OpenHCL has already reached an industrial deployment level and is utilized by Microsoft in the Azure platform (Azure Boost SKU) to support over 1.5 million virtual machines.<br \/>\n<br \/>Source: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62070\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u0441\u043b\u043e\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 OpenHCL \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d OpenVMM, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b OpenHCL. \u041a\u043e\u0434 OpenVMM \u0438 OpenHCL \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 MIT. OpenVMM \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430\u043c \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c \u0432 \u043e\u0434\u043d\u043e\u043c \u043a\u043e\u043b\u044c\u0446\u0435 \u0437\u0430\u0449\u0438\u0442\u044b \u0441 \u044f\u0434\u0440\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0438 \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":120220,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120219","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u0441\u043b\u043e\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 OpenHCL \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d OpenVMM, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b OpenHCL.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/en\/blog\/news\/microsoft-otkryl-kod-gipervizora-openvmm-i-platformy-paravirtualizaczii-openhcl\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Microsoft \u043e\u0442\u043a\u0440\u044b\u043b \u043a\u043e\u0434 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 OpenVMM \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043f\u0430\u0440\u0430\u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 OpenHCL | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u0441\u043b\u043e\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 OpenHCL \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d OpenVMM, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b OpenHCL.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/en\/blog\/news\/microsoft-otkryl-kod-gipervizora-openvmm-i-platformy-paravirtualizaczii-openhcl\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-10-18T11:09:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-10-18T11:09:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft has opened the code for the OpenVMM hypervisor and the OpenHCL paravirtualization platform | ProHoster","description":"Microsoft announced the open-sourcing of the layer for paravirtualization with OpenHCL and the OpenVMM virtual machine monitor, specifically developed for the operation of OpenHCL.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/news\/microsoft-otkryl-kod-gipervizora-openvmm-i-platformy-paravirtualizaczii-openhcl","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043e\u0442\u043a\u0440\u044b\u043b \u043a\u043e\u0434 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 OpenVMM \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043f\u0430\u0440\u0430\u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 OpenHCL | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u0441\u043b\u043e\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 OpenHCL \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d OpenVMM, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b OpenHCL.","og:url":"https:\/\/prohoster.info\/en\/blog\/news\/microsoft-otkryl-kod-gipervizora-openvmm-i-platformy-paravirtualizaczii-openhcl","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-10-18T11:09:11+00:00","article:modified_time":"2024-10-18T11:09:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120219","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:35:55","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 07:23:19","updated":"2026-02-09 17:35:55","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/120219","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=120219"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/120219\/revisions"}],"predecessor-version":[{"id":164165,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/120219\/revisions\/164165"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/120220"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=120219"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=120219"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=120219"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}