virtualization

Bryan Cantrill's Papers We Love talk on FreeBSD Jails and Solaris Zones, tracing how OS-level virtualization grew out of chroot and the limits of the traditional UNIX security model.

Quentin Perret of Google gives a technical deep dive into protected KVM (pKVM) on Arm64, a confidential computing approach for CPUs without hardware extensions. It explains how the nVHE hypervisor manages stage-2 MMU access control to protect guest memory.

Bryan Cantrill of Joyent describes the experience of porting KVM to SmartOS, an Illumos-based OS, at KVM Forum 2011. He covers the process, the pain points and how DTrace helped.

A talk by Yuri Iozzelli at a WebAssembly meetup on CheerpX, an x86 virtual machine running in the browser. It uses a JIT compiler that emits WebAssembly at runtime to run real native applications. It covers the architecture and demos such as porting a multiplayer C++ game.

Bryan Cantrill's Velocity NYC 2015 talk argues for running containers directly on bare metal rather than layering them on virtual machines. He covers the history of containers and how SmartOS runs Linux workloads via syscall emulation.

Micah Lee's Circle of HOPE 2018 talk on Qubes OS, which isolates activities in separate virtual machines so one compromise, such as a bad PDF or USB stick, does not expose everything. He gives an overview timed around the Qubes 4.0 release.

An AWS re:Invent 2018 session diving into the Nitro system, a set of hardware offload and security building blocks behind next-generation EC2 instances. It covers the design and architecture and how Nitro enables new instance types.

A roughly 14-minute interview with OpenBSD founder Theo de Raadt at ruBSD 2013. He talks about making painful changes, getting real feedback, mitigation techniques compared to other OSs, and virtualization.

Timothy Roscoe of ETH Zurich delivers the joint USENIX ATC/OSDI 2021 keynote arguing that operating systems must reckon with modern hardware, which is a heterogeneous collection of processors, firmware and coprocessors rather than a simple machine. It shows how much runs below and beside Linux.

A short animated simulation comparing how Multics and Unix were developed, showing why Unix's small composable programs and pipes gave it a efficiency advantage. It frames Unix as a moonshot achievable by a small team.

Paul Turner of Google presents kernel interfaces for user-level scheduling of real threads, aiming at a uniform synchronous programming model across C++, Java, Go and Python. It introduces the switchto-style system calls behind Google's fibers.

Bryan Cantrill of Joyent presents Manta, an internet-facing object store that lets you run compute directly on the data. The talk is peppered with ZFS history and Cantrill's trademark commentary on the industry.

Larry Hastings explains what Python's GIL is, what problems it solves and how it works, and presents his Gilectomy project to remove it, including the performance and C-extension obstacles.

A Computer History Museum oral history with Avie Tevanian covering his math talent, work on the Mach microkernel at CMU, joining NeXT, leading NEXTSTEP development and the 1996 Apple acquisition.

Bryan Cantrill's 2007 Google Tech Talk on DTrace, showing how dynamic tracing improves debugging of both development and live production systems. It includes a vivid war story about tracking down a problem on a Sun Ray server.

Liz Rice builds a container from scratch in about 100 lines of Go, showing that a container is not a lightweight VM but a set of Linux kernel features and flags.

X.Org developer Daniel Stone explains the history and technical limits of the X Window System and why Wayland was created, debunking myths from forum comments. He covers topics such as network transparency and blocking calls.

Ronald Minnich of Google explains how UEFI firmware is a large closed attack surface and describes Google's work replacing it with Linux-based boot firmware. It also touches on Intel ME and other security coprocessors.

Rob Landley compares Toybox and BusyBox and surveys options for embedded system command-line tools, including GNU. He also tells the story of leaving BusyBox, Toybox becoming Android's command line, and licensing.

Andrew Tanenbaum's FOSDEM 2010 talk on MINIX 3, a microkernel OS built for high reliability and security. It shows how the system detects and recovers from device driver crashes, and addresses microkernel performance concerns.

Benno Rice's BSDCan 2018 talk on why systemd exists and what it got right and wrong. It traces the history of Unix init and why Linux distributions adopted it, while asking what the BSDs should learn.

A BSD Now episode featuring a long interview with Joyent CTO Bryan Cantrill on dtrace, ZFS, pkgsrc, containers and more. It includes his rant on why Linux epoll is flawed and stories from Sun.

Kirk McKusick gives a narrative history of BSD from its start at UC Berkeley in the late 1970s through the 1980s releases and the lawsuit that led to 4.4BSD-Lite in 1992. It is full of anecdotes from a key developer.

Tony Chen of Microsoft explains at BlueHat Seattle 2019 how the Xbox One was designed to resist physical attacks. He covers the security design and hypervisor-based OS architecture that kept the console uncracked for years.

Stephen Kell's Strange Loop talk argues that C and Unix already contain Smalltalk-like dynamism and introspection that can be exposed. He presents his liballocs research on bridging dynamic and compiled languages.

Kiran Pamnany's Cambridge Julia Meetup talk on Julia's shared memory parallelism and its new task scheduler. It argues that fork-join and work-stealing models nest poorly and presents depth-first scheduling for composable parallelism.

Andreas Kling ports the game Diablo to SerenityOS, his from-scratch Unix-like operating system, using the devilutionX project. The roughly 80-minute session shows what porting third-party software to the OS involves.

Gary Bernhardt's Cascadia Ruby Conference 2011 talk on using the Unix shell for practical problem solving. He builds pipelines interactively by iterative refinement, using small tools as levers.

Theo de Raadt presents pledge, a new OpenBSD security mechanism that kills processes which exceed the system calls they declared they need. The talk was given late at night at Hackfest 2015.

A 1973 AT&T training film made for new employees at Bell Labs' Holmdel Computing Center, when Unix was in its third version and running at 16 computer centers in the Bell System. It shows how users submitted jobs and used the center's machines.

Bryan Cantrill presents Manta, an object store with in-situ compute that lets tools like grep, awk, and sed run map-reduce style over huge data. He frames it as bringing the Unix philosophy to big data.

Bryan Cantrill's illumos Day 2014 talk on running Linux containers on an illumos kernel via LX-branded zones. He covers emulating Linux syscalls on SmartOS and compares Linux and Solaris-derived systems.

A demonstration of SymbOS, a multitasking operating system for 8-bit Z80 machines, running on a real MSX turboR with an MP3MSX card and a CF IDE interface. It shows the OS playing audio and running a graphical desktop on very old hardware, captured from the real machine and not an emulator.

A Computer History Museum oral history interview with Dave Cutler, covering his youth, early work on operating systems at DuPont and Digital Equipment, and his path toward VMS and Windows NT. This is part one of a long-form interview.

Netflix engineer Drew Gallatin's EuroBSDcon 2022 talk quantifies the older FreeBSD optimizations that let Netflix serve web traffic at 800Gb/s, including TSO, LRO, VM page cache zones, asynchronous sendfile and unmapped mbufs.

A 1990 lecture by James Gosling on NeWS, Sun's networked window system in which clients send PostScript programs to the server for execution. It covers the high-level imaging model and compares NeWS with similar systems.

A two-hour Oxide and Friends session answering questions after shipping the first Oxide rack. Topics include making hardware as a startup and why Oxide chose illumos.

A 2007 Google Tech Talk in which Bryan Cantrill demonstrates DTrace and explains how it improves debugging of both development and live production systems.

A 32C3 talk dissecting Red Star OS, North Korea's state-built operating system. The speakers explain its internals and how it invades users' privacy, including file watermarking.

David Weston's BlueHat IL 2023 talk traces the evolution of Windows security and previews Windows 11 and hardware advances. It ends with upcoming changes such as Rust in the kernel and fonts, signed binaries and adminless Windows.