1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
| | ---
layout: page
title: Bibliography
nav_order: 200
---
<!-- SPDX-FileCopyrightText: 2019-2023 Alyssa Ross <hi@alyssa.is> -->
<!-- SPDX-License-Identifier: CC-BY-SA-4.0 OR GFDL-1.3-no-invariants-or-later -->
<!-- SPDX-License-Identifier: GPL-3.0-or-later -->
<p>If you'd like to find out when new links are posted, subscribe to
the <a href="https://spectrum-os.org/git/www/atom/bibliography.html">cgit
atom feed for this page</a>.
<ul>
<li><cite><a href="https://flatkill.org/">Flatpak — a security
nightmare</a></cite>
<li><cite><a href="https://blog.invisiblethings.org/papers/2015/x86_harmful.pdf">Intel
x86 Considered Harmful</a></cite>
<li><cite><a href="https://mjg59.dreamwidth.org/57199.html">Producing
a trustworthy x86-based Linux appliance</a></cite>
<li><cite><a href="https://lwn.net/Articles/459420/">dm-verity</a></cite>
<li><cite><a href="https://eprint.iacr.org/2023/1529.pdf">Shufflecake:
Plausible Deniability for Multiple Hidden Filesystems on Linux</a></cite>
<li><cite><a href="https://www.qubes-os.org/">Qubes OS</a></cite>
<li><cite><a href="https://doi.org/10.1145/3132747.3132763">My VM is
Lighter (and Safer) than your Container</a></cite>
<li><cite><a href="https://googleprojectzero.blogspot.com/2021/06/an-epyc-escape-case-study-of-kvm.html">An
EPYC escape: Case-study of a KVM breakout</a></cite>
<li><cite><a href="https://invisiblethingslab.com/resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf">Following
the White Rabbit: Software attacks against Intel® VT-d
technology</a></cite>
<li><cite><a href="https://doi.org/10.1145/3342195.3387526">A Linux
in Unikernel Clothing</a></cite>
<li><cite><a href="https://arxiv.org/abs/2112.06566">FlexOS: Towards
Flexible OS Isolation</a></cite>
<li><cite><a href="https://www.ozlabs.org/~rusty/virtio-spec/virtio-paper.pdf">virtio:
Towards a De-Facto Standard For Virtual I/O Devices</a></cite>
<li><cite><a href="https://docs.oasis-open.org/virtio/virtio/v1.1/virtio-v1.1.html">Virtual
I/O Device (VIRTIO) Version 1.1</a></cite>
<li><cite><a href="https://lwn.net/Articles/474088/">Safe device
assignment with VFIO</a></cite>
<li><cite><a href="https://lists.ozlabs.org/pipermail/lguest/2008-March/001064.html">Inter-guest
virtio I/O example with lguest</a></cite>
<li><cite><a href="https://lwn.net/Articles/610174/">Supporting
filesystems in persistent memory</a></cite>
<li><cite><a href="https://lwn.net/Articles/788333/">A filesystem
for virtualization</a></cite>
<li><cite><a href="https://archive.fosdem.org/2020/schedule/event/vai_virtio_fs/">virtio-fs:
Shared File System for Virtual Machines</a></cite>
<li><cite><a href="https://lwn.net/Articles/755593/">Unprivileged
filesystem mounts, 2018 edition</a></cite>
<li><cite><a href="https://www.phoronix.com/scan.php?page=news_item&px=VirtIO-DRM-Window-Server">VirtIO
DRM Window Server Support: Letting Guest VMs Interface With Host's
Compositor</a></cite>
<li><cite><a href="https://www.qemu.org/docs/master/interop/vhost-user.html">Vhost-user
Protocol</a></cite>
<li><cite><a href="https://wiki.qemu.org/Features/VirtioVhostUser">Features/VirtioVhostUser
— QEMU</a></cite>
<li><cite><a href="https://chromium.googlesource.com/chromiumos/third_party/kernel/+/refs/heads/chromeos-5.4/drivers/virtio/virtio_wl.c">Wayland
Virtio Driver</a></cite>
<li><cite><a href="https://roscidus.com/blog/blog/2021/03/07/qubes-lite-with-kvm-and-wayland/">Qubes-lite
With KVM and Wayland</a></cite>
<li><cite><a href="https://lwn.net/Articles/694291/">An initial
release of Flatpak portals for GNOME</a></cite>
<li><cite><a href="https://users.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf">Reflections
on Trusting Trust</a></cite>
<li><cite><a href="https://dwheeler.com/trusting-trust/dissertation/wheeler-trusting-trust-ddc.pdf">Fully
Countering Trusting Trust through Diverse Double-Compiling</a></cite>
<li><cite><a href="https://reproducible-builds.org/docs/buy-in/">Reproducible
Builds — Buy-in</a></cite>
<li><cite><a href="https://edolstra.github.io/pubs/phd-thesis.pdf">The
Purely Functional Software Deployment Model</a></cite>
<li><cite><a href="https://nixos.org/features.html">NixOS —
Features</a></cite>
<li><cite><a href="https://hal.inria.fr/hal-00824004/document">Functional
Package Management with Guix</a></cite>
<li><cite><a href="https://chromium.googlesource.com/chromiumos/platform/crosvm">Chrome
OS Virtual Machine Monitor</a></cite>
<li><cite><a href="https://prilik.com/blog/2019/05/16/crosvm-paravirt.html">Paravirtualized
Devices in crosvm — a Performance Panacea for Modern Virtual
Machines</a></cite>
<li><cite><a href="https://assets.amazon.science/96/c6/302e527240a3b1f86c86c3e8fc3d/firecracker-lightweight-virtualization-for-serverless-applications.pdf">Firecracker:
Lightweight Virtualization for Serverless Applications</a></cite>
<li><cite><a href="https://github.com/firecracker-microvm/firecracker/blob/master/docs/vsock.md#firecracker-virtio-vsock-design">Firecracker
Virtio-vsock Design</a></cite>
<li><cite><a href="https://github.com/cloud-hypervisor/cloud-hypervisor">cloud-hypervisor</a></cite>
</ul>
|