Signaler
Partager
Télécharger pour lire hors ligne
Recommandé
GPU virtualization has become an increasingly important requirement for client virtualization and cloud. Significant challenges exists realizing the multiplexing of graphics, media and compute workloads from multiple VMs and achieving the goals of being fully functional, high performance and secure. In this presentation, we will first review existing graphics virtualization technologies, and then introduce how XenGT - an open source solution from Intel - approaches differently. Broad functionality and good performance is achieved by accelerating the native OS graphics stack in each VM with minimum hypervisor intervention. A software mediator ensures the secure multiplexing of workloads from the multiple VMs by managing the scheduling of VMs on the GPU and controlling access to privileged resources and operations.XPDS13: XenGT - A software based Intel Graphics Virtualization Solution - Hai...
XPDS13: XenGT - A software based Intel Graphics Virtualization Solution - Hai...The Linux Foundation
Recommandé
GPU virtualization has become an increasingly important requirement for client virtualization and cloud. Significant challenges exists realizing the multiplexing of graphics, media and compute workloads from multiple VMs and achieving the goals of being fully functional, high performance and secure. In this presentation, we will first review existing graphics virtualization technologies, and then introduce how XenGT - an open source solution from Intel - approaches differently. Broad functionality and good performance is achieved by accelerating the native OS graphics stack in each VM with minimum hypervisor intervention. A software mediator ensures the secure multiplexing of workloads from the multiple VMs by managing the scheduling of VMs on the GPU and controlling access to privileged resources and operations.XPDS13: XenGT - A software based Intel Graphics Virtualization Solution - Hai...
XPDS13: XenGT - A software based Intel Graphics Virtualization Solution - Hai...The Linux Foundation
Due to the rapid shift toward cloud computing, virtual desktop infrastructure (VDI) and thin client computing, many organizations in the government desire a high assurance, multi-level secure server virtualization platform that is low-cost, open and enterprise ready. In this presentation, Jason Sonnek will present SecureServe, a recently launched effort to develop such a platform by building on the open-source Citrix XenServer. The SecureServe project will draw upon research in a number of areas, including dom0 disaggregation, Xen Security Modules mandatory access controls and static/dynamic attestation. In this presentation, Jason will describe the project objectives and requirements, the project's relation to Citrix XenClient XT and XenServer Windsor, current development status and plans for moving forward.XPDS13: SecureServe - A Multi-level Secure Server Virtualization Platform on ...
XPDS13: SecureServe - A Multi-level Secure Server Virtualization Platform on ...The Linux Foundation
The current state-of-the-art in displaying guest video is to copy pixel data from domU memory into a buffer in the device model domain, and then to render the display using something like X, or VNC. The quantity of data copied is partially mitigated by dirty page tracking. However when using the VM to play video or other other tasks that require frequent full-screen updates, copying is a significant drag on system performance and power consumption. By using the DRM subsystem in dom0 on systems with a unified memory architecture, it is possible to make arbitrary pages available for direct scanout by the graphics hardware. The in-kernel graphics drivers make this relatively straight forward and maintainable. This presentation explains how the current display path works, and how to use DRM to improve it.XPDS13: Zero-copy display of guest framebuffers using GEM - John Baboval, Citrix
XPDS13: Zero-copy display of guest framebuffers using GEM - John Baboval, CitrixThe Linux Foundation
Szanowni Państwo, prezentujemy raport przedstawiający portret animacji i edukacji kulturowej w Polsce. Tekst jest materiałem podsumowującym pierwszy moduł badawczy zrealizowany w ramach projektu „Animacja/Edukacja. Możliwości i ograniczenia edukacji i animacji kulturowej w Polsce” dofinansowanego ze środków Ministra Kultury i Dziedzictwa Narodowego.
Publikacja powstała na podstawie wyników pogłębionych analiz wniosków grantowych składanych w ramach programu Ministra Kultury i Dziedzictwa Narodowego „Edukacja kulturalna i diagnoza kultury” z 2012 roku, priorytet „Edukacja kulturalna”.
Serdecznie zapraszamy do zapoznania się z tekstem, zwłaszcza osoby zainteresowane tematyką animacji i edukacji kulturalnej, w tym animatorów kultury.
Rezultaty naszych badań zostaną zaprezentowane przez członków zespołu projektowego podczas NieKongresu Animatorów Kultury, który odbędzie się w 2014 roku w Warszawie.
W przyszłym roku powstanie raport końcowy zawierający wyniki wszystkich trzech modułów badawczych.
Miłej lektury!
RAPORT Z PIERWSZEGO ETAPU BADAŃ W RAMACH PROJEKTU: ANIMACJA/EDUKACJA. MOŻLIWO...
RAPORT Z PIERWSZEGO ETAPU BADAŃ W RAMACH PROJEKTU: ANIMACJA/EDUKACJA. MOŻLIWO...Małopolski Instytut Kultury
Terms related to security like 'disaggregation' and 'stubdom' have found their way into the standard Xen vernacular. Implementations of these architectures still require heavy lifting but examples have made their way into both the open source and commercial products. In this talk Philip presents a lesser known but complimentary method to confine QEMU processes using SELinux type enforcement. This architecture alone is interesting but Philip believes its utility extends beyond QEMU and SELinux. Future problems like inter-VM communication mechanisms hold unique challenges with regard to access control and policy semantics. Philip will argue that an approach influenced by sVirt and user-space object managers will be useful here. As always, attendees should expect tangents into abstract topics like the nature of trust and the utopic world that strong security mechanisms will bring about.XPDS13: In-Guest Mechanism to Strengthen Guest Separation - Philip Tricca, Ci...
XPDS13: In-Guest Mechanism to Strengthen Guest Separation - Philip Tricca, Ci...The Linux Foundation
Contenu connexe
En vedette
Due to the rapid shift toward cloud computing, virtual desktop infrastructure (VDI) and thin client computing, many organizations in the government desire a high assurance, multi-level secure server virtualization platform that is low-cost, open and enterprise ready. In this presentation, Jason Sonnek will present SecureServe, a recently launched effort to develop such a platform by building on the open-source Citrix XenServer. The SecureServe project will draw upon research in a number of areas, including dom0 disaggregation, Xen Security Modules mandatory access controls and static/dynamic attestation. In this presentation, Jason will describe the project objectives and requirements, the project's relation to Citrix XenClient XT and XenServer Windsor, current development status and plans for moving forward.XPDS13: SecureServe - A Multi-level Secure Server Virtualization Platform on ...
XPDS13: SecureServe - A Multi-level Secure Server Virtualization Platform on ...The Linux Foundation
The current state-of-the-art in displaying guest video is to copy pixel data from domU memory into a buffer in the device model domain, and then to render the display using something like X, or VNC. The quantity of data copied is partially mitigated by dirty page tracking. However when using the VM to play video or other other tasks that require frequent full-screen updates, copying is a significant drag on system performance and power consumption. By using the DRM subsystem in dom0 on systems with a unified memory architecture, it is possible to make arbitrary pages available for direct scanout by the graphics hardware. The in-kernel graphics drivers make this relatively straight forward and maintainable. This presentation explains how the current display path works, and how to use DRM to improve it.XPDS13: Zero-copy display of guest framebuffers using GEM - John Baboval, Citrix
XPDS13: Zero-copy display of guest framebuffers using GEM - John Baboval, CitrixThe Linux Foundation
Szanowni Państwo, prezentujemy raport przedstawiający portret animacji i edukacji kulturowej w Polsce. Tekst jest materiałem podsumowującym pierwszy moduł badawczy zrealizowany w ramach projektu „Animacja/Edukacja. Możliwości i ograniczenia edukacji i animacji kulturowej w Polsce” dofinansowanego ze środków Ministra Kultury i Dziedzictwa Narodowego.
Publikacja powstała na podstawie wyników pogłębionych analiz wniosków grantowych składanych w ramach programu Ministra Kultury i Dziedzictwa Narodowego „Edukacja kulturalna i diagnoza kultury” z 2012 roku, priorytet „Edukacja kulturalna”.
Serdecznie zapraszamy do zapoznania się z tekstem, zwłaszcza osoby zainteresowane tematyką animacji i edukacji kulturalnej, w tym animatorów kultury.
Rezultaty naszych badań zostaną zaprezentowane przez członków zespołu projektowego podczas NieKongresu Animatorów Kultury, który odbędzie się w 2014 roku w Warszawie.
W przyszłym roku powstanie raport końcowy zawierający wyniki wszystkich trzech modułów badawczych.
Miłej lektury!
RAPORT Z PIERWSZEGO ETAPU BADAŃ W RAMACH PROJEKTU: ANIMACJA/EDUKACJA. MOŻLIWO...
RAPORT Z PIERWSZEGO ETAPU BADAŃ W RAMACH PROJEKTU: ANIMACJA/EDUKACJA. MOŻLIWO...Małopolski Instytut Kultury
Terms related to security like 'disaggregation' and 'stubdom' have found their way into the standard Xen vernacular. Implementations of these architectures still require heavy lifting but examples have made their way into both the open source and commercial products. In this talk Philip presents a lesser known but complimentary method to confine QEMU processes using SELinux type enforcement. This architecture alone is interesting but Philip believes its utility extends beyond QEMU and SELinux. Future problems like inter-VM communication mechanisms hold unique challenges with regard to access control and policy semantics. Philip will argue that an approach influenced by sVirt and user-space object managers will be useful here. As always, attendees should expect tangents into abstract topics like the nature of trust and the utopic world that strong security mechanisms will bring about.XPDS13: In-Guest Mechanism to Strengthen Guest Separation - Philip Tricca, Ci...
XPDS13: In-Guest Mechanism to Strengthen Guest Separation - Philip Tricca, Ci...The Linux Foundation
En vedette (10)
XPDS13: Welcome & Community Roundup - Lars Kurth, Citrix
XPDS13: Welcome & Community Roundup - Lars Kurth, Citrix
XPDS13: SecureServe - A Multi-level Secure Server Virtualization Platform on ...
XPDS13: SecureServe - A Multi-level Secure Server Virtualization Platform on ...
XPDS13: Zero-copy display of guest framebuffers using GEM - John Baboval, Citrix
XPDS13: Zero-copy display of guest framebuffers using GEM - John Baboval, Citrix
RAPORT Z PIERWSZEGO ETAPU BADAŃ W RAMACH PROJEKTU: ANIMACJA/EDUKACJA. MOŻLIWO...
RAPORT Z PIERWSZEGO ETAPU BADAŃ W RAMACH PROJEKTU: ANIMACJA/EDUKACJA. MOŻLIWO...
XPDS13: Perf Support in Xen - Boris Ostrovsky, Oracle
XPDS13: Perf Support in Xen - Boris Ostrovsky, Oracle
XPDS13: In-Guest Mechanism to Strengthen Guest Separation - Philip Tricca, Ci...
XPDS13: In-Guest Mechanism to Strengthen Guest Separation - Philip Tricca, Ci...