Software Bullet Point Rule-based Sandbox RunC Needs to work with SELinux, AppArmor, Seccomp, cgroup VM-based Sandbox Kata-container BareMetal Only Heavy control logic Application kernel based Sandbox and loader for vmlinux and bzImage images as well as some other helpers for kernel commandline. • vm-virtio: virtio device trait and implementation for virtio primitives such as virtqueues and descriptor framework. • virtio-bindings: Rust FFI bindings to virtio kernel headers generated using bindgen. • vm-memory: abstractions over a virtual machine's memory. • vmm-sys-util: collection of modules providing

代码翻译 栈式虚拟机 Rust 编译器 KCL 编译器架构升级 Source Code AST LLVM IR Native/WASM Source Code AST Bit code VM Source Code Python code Pros Cons 简单易上手 生态丰富 研发效率高 性能问题 无法满足自动化系统需求 稳定性问题 None 空对象，属性不存在等运行时错误 性能对比 为什么选择 Rust? > https://github.com/Peefy/StackMachine CPython RustPython GPython VM(go) VM(Rust) VM(Python) LLVM Native Code 简单Case a = 1 0.05s 0.125s 0.012s 0.01s 0.008s 0.6s 0.001s for b

void @_ZN8near_sdk11environment3env14promise_result17hdbc39eb9958e6bdc E(ptr sret(%"near_sdk::types::vm_types::PromiseResult") %_21, i64 0) #9, !dbg !4685 %_22 = load i32, ptr %_21, align 4, !dbg !4685 bb13: ; call core::ptr::drop_in_placevm_t ypes::PromiseResult> call void @"_ZN4core3ptr61drop_in_place$LT$near_sdk ..types..vm_types..PromiseResult$GT$17hc8d1 a50a856c2b05E"(ptr %_21)

� � � � � � � � � � � � . – � � � � � VM � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � cache � � � . � � � � � � � � � � � � VM � � � � � � � � � � � � � � � cache � � � � � � � cache � � � � � � � � � � � � � � � � � � � � cache � � � � � � � � � � � � � � � � � � � VM � � � � � � � � � � � � � � � � � � � � � � � � � � � � � . ) � � � � � cache � � � � � � � � � � � not necessarily the case in general . – If it were running in a VM, this can lead to cache coherency issues. The problem is that the VM is accessing memory directly with the cache disabled, while the host

not necessarily the case in general. – If it were running in a VM, this can lead to cache coherency issues. The problem is that the VM is accessing memory directly with the cache disabled, while the host cache fills, and then changes from one or the other will get lost when the cache is cleaned or the VM enables the cache. (Cache is keyed by physical address, not VA or IPA.) • For simplicity, we just not necessarily the case in general. – If it were running in a VM, this can lead to cache coherency issues. The problem is that the VM is accessing memory directly with the cache disabled, while the host

not necessarily the case in general. – If it were running in a VM, this can lead to cache coherency issues. The problem is that the VM is accessing memory directly with the cache disabled, while the host cache fills, and then changes from one or the other will get lost when the cache is cleaned or the VM enables the cache. (Cache is keyed by physical address, not VA or IPA.) • For simplicity, we just not necessarily the case in general. – If it were running in a VM, this can lead to cache coherency issues. The problem is that the VM is accessing memory directly with the cache disabled, while the host

會設定+strict-align，防止編譯器產生未對齊的存取，因此在本例中應該不會出錯，但這 不一定是一般情況。 – 如果是在 VM 中執行，可能會導致快取一致性問題。問題在於 VM 會在快取已停用時直接存 取記憶體，而主機具有相同記憶體的可快取別名。即使主機未明確存取記憶體，推測存取行為 仍可能導致快取填補，而當快取遭到清理或 VM 啟用快取時，存取之間的變更就會遺失 (快取 是以實體位址做為索引鍵，並非使用 VA 或 IPA)。 aarch64-unknown- none，這會設定+strict-align，防止編譯器產生未對齊的存取，因此應該不會出錯，但這 不一定是一般情況。 275 – 如果是在 VM 中執行，可能會導致快取一致性問題。問題在於 VM 會在快取已停用時直接存 取記憶體，而主機具有相同記憶體的可快取別名。即使主機未明確存取記憶體，推測存取行為 仍可能導致快取填補，而存取之間的變更就會遺失。同樣地，這在本例中不成問題 activate the page table. idmap.activate(); • 目前僅支援 EL1，但應該很容易新增其他例外狀況層級的支援功能。 • 這是用於 Android 中的受保護 VM 韌體。 • 執行這個範例並不容易，因為需要在實際硬體上執行，或是使用 QEMU。 54.3 buddy_system_allocator buddy_system_allocator 是實作基本夥伴系統分配器的第三方

會設定+strict-align，防止編譯器產生未對齊的存取，因此在本例中應該不會出錯，但這 不一定是一般情況。 – 如果是在 VM 中執行，可能會導致快取一致性問題。問題在於 VM 會在快取已停用時直接存 取記憶體，而主機具有相同記憶體的可快取別名。即使主機未明確存取記憶體，推測存取行為 仍可能導致快取填補，而當快取遭到清理或 VM 啟用快取時，存取之間的變更就會遺失 (快取 是以實體位址做為索引鍵，並非使用 VA 或 IPA)。 aarch64-unknown- none，這會設定+strict-align，防止編譯器產生未對齊的存取，因此應該不會出錯，但這 不一定是一般情況。 273 – 如果是在 VM 中執行，可能會導致快取一致性問題。問題在於 VM 會在快取已停用時直接存 取記憶體，而主機具有相同記憶體的可快取別名。即使主機未明確存取記憶體，推測存取行為 仍可能導致快取填補，而存取之間的變更就會遺失。同樣地，這在本例中不成問題 activate the page table. idmap.activate(); • 目前僅支援 EL1，但應該很容易新增其他例外狀況層級的支援功能。 • 這是用於 Android 中的受保護 VM 韌體。 • 執行這個範例並不容易，因為需要在實際硬體上執行，或是使用 QEMU。 54.3 buddy_system_allocator buddy_system_allocator 是實作基本夥伴系統分配器的第三方

你能买最新硬件，对手也能，无助于提升竞争力 物联网 • 需要大批量部署，必须控制硬件成本 • 受限于成本控制，硬件性能不强 • 受限于电池供电，功耗不能高 这就要求系统和应用软件要高效利用硬件 程序运行在VM上，或后台跑GC 白白浪费了宝贵的CPU和内存资源 Rust在系统编程领域 面临极其强大的竞争对手 嵌入式 C/Rust 系统编程 C/C++/C++1x/Rust Web开发 Java/Php/Python/Js 现代C++尚在进化革新之中…… Rust V.S. 传统C/C++ • C/C++有很强的控制性、很弱的安全性 • Rust同时拥有很强的控制性和很强的安全性 • Rust和C/C++一样：运行效率很高，无GC无VM Java/Python/Ruby Rust Haskell 安全性 控制性 C/C++ Rust V.S. 现代C++ (1x) • 都是对传统C++语言的革新 • 二者应用场景相似，发展目标和方向大体相当

necessariamente o caso em geral. – Se estivesse sendo executado em uma VM, isso pode levar a problemas de coerência de cache. O problema é que a VM está acessando a memória diretamente com o cache desabilitado preenchimentos de cache e, em seguida, alterações de um ou de outro serão perdidas quando o cache for limpo ou a VM habilitar o cache. (O cache é indexado pelo endereço físico, não VA ou IPA.) • Para simplificar, usamos necessariamente o caso em geral. – Se estivesse sendo executado em uma VM, isso pode levar a problemas de coerência de cache. O problema é que a VM está acessando a memória diretamente com o cache desabilitado