第三届中国 Rust 开发者大会 THE FIRST EXPLORATION OF PROJECT SPARROW Feng Li ( 李枫 ) hkli2013@126.com Jun 18, 2023 An indie developer from China  The Virtualization, RISC-V, EDA, 5G/6G… Who Am I Agenda I. Background  Tech Stack  Project Sparrow  Testbed II. Practicing Sparrow  CantripOS(KataOS)  Rust support in seL4 userspace I. Background  https://lowrisc.org/  https://github.com/lowrisc 1.4.2.1 Project OpenTitan Overview I. Background  https://opentitan.org/  . Source: https://lowrisc

txt 。 二、根项目的 CMakeLists.txt 配置 • 在根项目的 CMakeLists.txt 中，设置了默 认的构建模式，设置了统一的 C++ 版本 等各种选项。然后通过 project 命令初始 化了根项目。 • 随后通过 add_subdirectory 把两个子项 目 pybmain 和 biology 添加进来（顺序 无关紧要），这会调用 pybmain/CMakeLists h>|lib*|share)/*/cmake/ • 其中 是变量 ${CMAKE_PREFIX_PATH} ， Windows 平台默认为 C:/Program Files 。 • 是你在 find_package( REQUIRED) 命令中指定的包名。 • 是系统的架构名。 https://zhuanlan.zhihu 会依次搜索： • C:/Program Files/Qt5Config.cmake • C:/Program Files/cmake/Qt5Config.cmake • C:/Program Files/Qt5/Qt5Config.cmake • C:/Program Files/Qt5/cmake/Qt5Config.cmake • C:/Program Files/Qt5/lib/cmake/Qt5/Qt5Config

中添加一个可执行文件作为构建目标 另一种方式：先创建目标，稍后再添加源文件 如果有多个源文件呢？ 逐个添加即可 使用变量来存储 建议把头文件也加上，这样在 VS 里可以出现在“ Header Files” 一栏 使用 GLOB 自动查找当前目录下指定扩展名的文件，实现批量添加源文件 启用 CONFIGURE_DEPENDS 选项，当添加新文件时，自动更新变量 如果源码放在子文件夹里怎么办？ 型为发布模式（高度优化）而不是默认的调试模式（不会优化）。 我们稍后会详细捋一遍类似于 CMAKE_BUILD_TYPE 这样的东西。绝 大多数 CMakeLists.txt 开头都会有的部分，可以说是“标准模板”了。 project ：初始化项目信息，并把当前 CMakeLists.txt 所在位置作为根 目录 这里初始化了一个名称为 hellocmake 的项目，为什么需要项目名？ 对于 MSVC ，他会在 build 表示当前输出目录的位置，例如 ~/hellocmake/build 。 project ：初始化项目信息，并把当前 CMakeLists.txt 所在位置作为根 目录 和子模块的关系： PROJECT_x_DIR 和 CMAKE_CURRENT_x_DIR 的 区别 PROJECT_SOURCE_DIR 表示最近一次调用 project 的 CMakeLists.txt 所在的源码目 录。 CMAKE_CURRENT_SOURCE_DIR

Visit https://aka.ms/vcpkg/team for more details Demo CMake integration CMake is a first-class project system in Visual Studio Familiar edit-build-debug inner-loop • including MSVC and Clang-tidy squiggles Visual Studio Build Debug Edit Developer inner-loop Developer inner-loop Build Debug Edit Find in Files 1.8x faster 1 2 0 5 10 15 20 25 30 35 40 45 50 47 27 Series1 Open C++ File 2.4x faster 1 2 0 0.5 ms/18xfaster Performance of Visual Studio Developer inner-loop Build Debug Edit Find in Files 1.8x faster Open C++ File 2.4x faster IntelliSense Ready* 1.9x faster *) Colorization + Member

Based on Rust-VMM About Us Yingzhe Ru Senior Software Engineer at Tencent Working on TKEStack project, have great interest and enthusiasm in Cloud Native and Open Source Liangyu Zhou Senior Software Seccomp, AppArmor, Capabilities, Cgroup 3. Intrusion Detection - Monitor suspicious read/write to host files. For example, containerd-shim/busybox/docker-runc ， /usr/bin/docker-runc /bin/bash /bad_init /proc/self/fd/ VPC Want to get safer and faster? Rust-VMM Why we love Rust-VMM? Rust-VMM is an open-source project that empowers the community to build custom Virtual Machine Monitors (VMMs) and hypervisors.

Early prototype s “Core” engineerin g Public launch Adoption ramp-up Mass adoption Project Timeline NativeScript npm Downloads What is NativeScript? o Open source framework (ASLv2) o Create almost all code between web and mobile “Hello World” Let's roll-up our sleeves Starting a New Project Running on iOS $ tns run ios Running on Android $ tns run android Alternative Android Emulators (Flexbox) GridLayout GridLayout Label TextField StackLayout Platform-Specific Capabilities o Files: .android or .ios o Markup: or o Attributes: android:

submodule acquires Boost.Math for Special Math • tests/std, tests/libcxx, tests/tr1 (legacy) • llvm-project submodule for libc++'s test suite • Uses Python and lit (LLVM Integrated Tester) • Linear history fewer unique bugs • Makes inconsistent code stand out as unusual or incorrect34 Code Reviews Project35 Status Chart: Monthly Merged PRs36 Year 1 ends. Year 2 begins!37 More Info • Links • Repository: product/test code • Saves an incredible amount of time • Our parallelize tool runs it quickly, only on C++ files • Failed checks display the edits that clang-format wants • Building all architectures is very fast

Advantages  Replace header files  Modules explicitly state what should be exported (e.g. classes, functions, …)  Separation into module interface files and module implementation files is possible but not Improves build throughput; will be processed only once  Comparable to precompiled header files (PCH)  Custom headers can also be made importable, but how to is compiler dependent “How C++20

具体配置 开发工程师 CI 过程 project-unit-test project-scan • 单元测试、代码扫描 更新日常开发环境及 dev 业务配 置 project-dev-workflow • 构建、配置变更（ Apollo/Nacos ）、数 据变更、部署、冒烟测试、项目管理任务 变更 测试工程师 更新测试验证环境 project-sit-workflow • 构建、配置变更（ 据变更、部署、接口测试 更新集成测试环境 project-auto-sit-workflow • 构建，部署，场景测试 发布工程师 更新预发环境 project-uat-workflow • 质量门禁、构建、配置变更（ Apollo/ Nacos ）、数据变更、部署 uat （变量 变更、模板变更）、全量回归测试 更新生产环境 project-prod-workflow • 审批、配置变更（

harbor/harbor/ Apache 2.0 license An open source trusted cloud native registry project HARBOR More integrations in future Harbor Project History Harbor Community Harbor Users and Partners (selected) x x management Multi Deployments • Docker Compose • BOSH/Pivotal Tile • Helm Chart Label • Label in project and system scopes • Mark labels to image and chart Harbor Architecture API Routing API Routing to involve day0 operation in Harbor? Website ： https://github.com/goharbor/harbor Twitter: @Project_harbor Slack: #harbor/#harbor-dev (register via slack.cncf.io) Email group ：（ Refer README on