Virtualization. Darren Alton

Transcription

1 Virtualization Darren Alton

2 A brief introduction... In general, virtualization means emulating computer hardware* with software**. Virtual machine (VM) can mean a couple of things: A process virtual machine runs a single process. A system virtual machine usually emulates an entire computer. We'll be primarily, but not necessarily exclusively, focusing our attention on system virtual machines. * sometimes not real hardware ** sometimes assisted by real hardware

3 Terminology An operating system installed inside a VM is often called the "guest." An operating system installed on the physical hardware is similarly called the "host" (assuming it has any guests). The virtual machine software itself is often called a "hypervisor," a "virtual machine monitor" (VMM), or, in some cases, an "emulator."

4 Why bother? Guests can often be managed in the same ways as files and processes on the host system. Run software incompatible with the host system on a guest. Simultaneously run multiple guests on the same host, sharing the host's resources. Isolate the guest systems for security reasons.

5 How does it work? The simplest case of an emulator is a pure interpreter, where the guest CPU is implemented entirely in software. + Portable, easily generalizes to nearly any host or guest architecture + Conceptually simple - Very slow! // the basic concept in pseudo-code: while (running) { op = memory[pc++]; if (op not in ISA) { error("illegal instruction!"); running = false; } run_guest_opcode(op, memory); } image: David Byrne, in Once in a Lifetime by Talking Heads

6 How does it work? A dynamic recompiler, or Just-In-Time (JIT) compiler, disassembles the guest's machine code and recompiles it for the host. + Much faster than interpreting each operation individually - More complex, harder to implement // the basic concept in pseudo-code: while (running) { if (cache[pc] does not exist) { asm = disasm_guest(memory, pc); if (asm is null) { error("illegal instruction!"); running = false; } cache[pc] = compile_for_host(asm); } execute(cache[pc]); } image: "Johnny 5," from Short Circuit

7 What about the same architecture? You may ask, "Suppose I just want to run an x86 guest on an x86 host, can't I just forgo all that re-interpreting and recompiling business and run the guest's code directly?" In a sense, yes, but there are some issues. First, we need to discuss some properties of instruction set architectures (ISA), and what is needed to be "virtualizable." In a paper published in 1974, Gerald J. Popek and Robert P. Goldberg defined criteria for what we now call "classical virtualization." Fidelity - The guest must run the same as it would natively. Performance - A "statistically dominant" subset of the opcodes must be executed directly on the host's CPU. Safety - The hypervisor must always remain in control of the guest. x86 in particular doesn't quite meet these requirements!

8 Handling sensitive instructions First, some definitions: Sensitive instructions depend on or affect the system configuration. Privileged instructions can only be run in kernel mode and cause an exception if run in user mode. Let S be the set of sensitive instructions, and P be the set of privileged instructions: Popek and Goldberg proposed that if S P, then the ISA can be virtualized by a "trap-and-emulate" method. // the basic concept in pseudo-code: while (running) { try { execute(memory + pc); } catch (Exception e) { pc = e.location; op = memory[pc++]; if (op not in ISA) { error("illegal instruction!"); running = false; } else { run_guest_opcode(op, memory); } } } image: Admiral Ackbar, from Star Wars: Episode VI

9 Failing to handle sensitive instructions However, the x86 ISA contains no less than seventeen instructions that are sensitive, but not considered privileged. VMware, VirtualBox, and others employ binary translation, which uses dynamic recompilation where needed. AMD and Intel processors retrofit classical virtualizability onto the x86 architecture in 2005.

10 Hardware-assisted failure These extensions added: The VMCB, which contains the state of the guest, and what to trap. The "vmrun" instruction, which enters virtual machine mode until a trap. A security hole in the x86 ISA itself! The "Blue Pill" attack. image: Morpheus and Neo, from The Matrix

11 Memory management Virtualizing memory is a tricky problem as well. Consider that the guests and host each must have their own page tables, and they must not interfere with each other. Also consider how swap space would behave...

12 Paravirtualization Suppose we didn't care about "classical" virtualization. We probably don't want to budge much on performance and safety... But suppose we don't care whether the guest knows that it's a guest. Enter paravirtualization, which requires modifying the guest operating system's kernel to interact with the hypervisor. Requires the guest OS be modified to cooperate with the hypervisor.

13 Recursive virtualization Popek and Goldberg, again: "THEOREM: A conventional third generation computer is recursively virtualizable if it is: 1. [classically] virtualizable, and 2. a VMM without any timing dependencies can be constructed for it." Recursive virtualization is not always possible. image: Cobb from Inception

14 In practice... QEMU is effectively the Swiss Army Knife of virtualization. VMware and VirtualBox are popular virtual machines for x86, with a GUI for managing virtual machines and disks. Xen is a popular hypervisor for paravirtualization.

15 High-level emulation (HLE) Some hardware is costly to fully emulate. Instead of emulating the whole device at a lower level, reimplement the functionality that device provides. So, instead of emulating the GPU, pass along the job to the host GPU. "UltraHLE" popularized this approach in VMware, Parallels, and VirtualBox now do this. image: Mewtwo from Pokemon Stadium

16 Not quite emulation, but... WINE Is Not an Emulator. Cygwin provides a Unix-like environment on Windows. User-mode Linux is a Linux kernel built to run as an ordinary process on the host. colinux is the same thing, but for Windows hosts. OpenVZ and Lguest allow the host kernel to use multiple instances of itself as "guests." Similar to FreeBSD's jail(8), which differs from typical chroot(8) jail in that it isolates everything, not just the filesystem. image: stock photo

17 Live migration between hosts It is sometimes possible to move a guest from one host to another without the guest ever being shut down. This is called "live migration" or "seamless migration." Usually requires that any virtual disks be on a network share available to both hosts to be possible. The memory of the guest is copied over the network... then the guest starts on the target and stops on the source.

18 To the cloud! Infrastructure as a Service (IaaS) Some cloud-based services offer the ability to rent virtual machines. More flexible than paying for and maintaining physical servers. Usually don't have to worry about installing and configuring the OS. What virtualization methods are best for IaaS hosting? image: Tim from Braid

19 Running a Nintendo Wii emulator inside VirtualBox on Linux

20 Virtualizing a lot of game consoles on Linux... at the same time

21 Resources Hardware Support for Efficient Virtualization Xen and the Art of Virtualization A Comparison of Software and Hardware Techniques for x86 Virtualization Introducing Blue Pill Formal requirements for virtualizable third generation architectures Live Migration of Virtual Machines

22 Questions (and, hopefully, answers) This presentation, with more detailed slides: