Release of Asterinas 0.19 has been published, developing a kernel written in the Rust language and intended for use in general-purpose operating systems. The kernel provides an ABI (Application Binary Interface) compatible with the Linux kernel and can be used as a substitute. Meanwhile, the Asterinas NixOS distribution is being developed, combining the Asterinas kernel with the NixOS system environment. The project has been in development since 2022 and is distributed under the MPL (Mozilla Public License). <\/p>\n
Currently, the kernel implements over 240 Linux system calls. In the Asterinas NixOS distribution, over 100 packages from NixOS have been verified to work on top of the Asterinas kernel. Supported packages include: Xfce, Firefox, bash, systemd, Podman, QEMU, rsync, Apache httpd, nginx, SQLite, Redis, Clang, GCC, Go, Lua, Node.js, OpenJDK, Perl, PHP, Python, Ruby, Rust, Git, FFmpeg, PyTorch, TensorFlow, Ollama, and Codex.<\/p>\n
The kernel provides full support for the x86-64 architecture, partial support for ARM64, RISC-V 64, and x86-64 with Intel TDX-based isolation, as well as initial support for the LoongArch 64 architecture. High-priority application areas include systems dependent on Linux ABI but requiring a higher level of security. For example, Asterinas is proposed for constructing system environments that are secure. virtuella maskiner<\/a>, d\u00e4r teknologier som ARM CCA, AMD SEV och Intel TDX anv\u00e4nds f\u00f6r isolering, samt p\u00e5 v\u00e4rdsystemet som m\u00f6jligg\u00f6r k\u00f6rning av containrar.<\/p>\n F\u00f6r att minska risken f\u00f6r minnesfel, som \u00e4r den fr\u00e4msta k\u00e4llan till de mest farliga s\u00e5rbarheterna, anv\u00e4nds Rust-spr\u00e5ket och en taktik med begr\u00e4nsad anv\u00e4ndning av unsafe-block vid skrivandet av Asterinas. K\u00e4rnan \u00e4r byggd med hj\u00e4lp av framekernel-arkitekturen, d\u00e4r man har f\u00f6rs\u00f6kt kombinera mikro-k\u00e4rnornas isoleringsm\u00f6jligheter med effektiviteten hos monolitiska k\u00e4rnor.<\/p>\n Kompontenterna i Asterinas-k\u00e4rnan placeras i ett gemensamt adressutrymme, och s\u00e4kerhet uppn\u00e5s genom logisk separation av s\u00e4ker kod och kod d\u00e4r s\u00e4kerhetsproblem kan uppst\u00e5. K\u00e4rnan \u00e4r uppdelad i tv\u00e5 delar skrivna i Rust: OS Framework och OS Services. I OS Services \u00e4r anv\u00e4ndning av unsafe-block f\u00f6rbjuden, och alla l\u00e5gniv\u00e5operationer som kr\u00e4ver kodutf\u00f6rande i unsafe-block har flyttats till OS Framework och \u00e4r endast tillg\u00e4ngliga via ett h\u00f6g-niv\u00e5 API. Alla systemanrop, filsystem och drivrutiner implementeras p\u00e5 OS Services-niv\u00e5 och kan inte inkludera unsafe-block.<\/p>\n For developing system services and kernel modules, the OSDK (Operating System Development Kit) toolkit is provided, which includes the cargo-osdk utility for creating, building, testing, and running operating system components. A set of libraries, OSTD (Operating System Standard Library), has been prepared for developers, including a version of the standard Rust libraries (crate std) adapted for use in operating system components.<\/p>\n Among the changes in Asterinas 0.19:<\/p>\n\n
\n