---
layout: page
title: Bibliography
nav_order: 600
---
<!-- SPDX-FileCopyrightText: 2019-2023 Alyssa Ross <hi@alyssa.is> -->
<!-- SPDX-License-Identifier: CC-BY-SA-4.0 OR GFDL-1.3-no-invariants-or-later -->
<!-- SPDX-License-Identifier: GPL-3.0-or-later -->

<p>If you'd like to find out when new links are posted, subscribe to
the <a href="https://spectrum-os.org/git/www/atom/bibliography.html">cgit
atom feed for this page</a>.

<ul>

  <li><cite><a href="https://flatkill.org/">Flatpak — a security
  nightmare</a></cite>

  <li><cite><a href="https://blog.invisiblethings.org/papers/2015/x86_harmful.pdf">Intel
  x86 Considered Harmful</a></cite>

  <li><cite><a href="https://mjg59.dreamwidth.org/57199.html">Producing
  a trustworthy x86-based Linux appliance</a></cite>

  <li><cite><a href="https://lwn.net/Articles/459420/">dm-verity</a></cite>

  <li><cite><a href="https://eprint.iacr.org/2023/1529.pdf">Shufflecake:
  Plausible Deniability for Multiple Hidden Filesystems on Linux</a></cite>

  <li><cite><a href="https://www.qubes-os.org/">Qubes OS</a></cite>

  <li><cite><a href="https://doi.org/10.1145/3132747.3132763">My VM is
  Lighter (and Safer) than your Container</a></cite>

  <li><cite><a href="https://googleprojectzero.blogspot.com/2021/06/an-epyc-escape-case-study-of-kvm.html">An
  EPYC escape: Case-study of a KVM breakout</a></cite>

  <li><cite><a href="https://invisiblethingslab.com/resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf">Following
  the White Rabbit: Software attacks against Intel® VT-d
  technology</a></cite>

  <li><cite><a href="https://doi.org/10.1145/3342195.3387526">A Linux
  in Unikernel Clothing</a></cite>

  <li><cite><a href="https://arxiv.org/abs/2112.06566">FlexOS: Towards
  Flexible OS Isolation</a></cite>

  <li><cite><a href="https://www.ozlabs.org/~rusty/virtio-spec/virtio-paper.pdf">virtio:
  Towards a De-Facto Standard For Virtual I/O Devices</a></cite>

  <li><cite><a href="https://docs.oasis-open.org/virtio/virtio/v1.1/virtio-v1.1.html">Virtual
  I/O Device (VIRTIO) Version 1.1</a></cite>

  <li><cite><a href="https://lwn.net/Articles/474088/">Safe device
  assignment with VFIO</a></cite>

  <li><cite><a href="https://lists.ozlabs.org/pipermail/lguest/2008-March/001064.html">Inter-guest
  virtio I/O example with lguest</a></cite>

  <li><cite><a href="https://lwn.net/Articles/610174/">Supporting
  filesystems in persistent memory</a></cite>

  <li><cite><a href="https://lwn.net/Articles/788333/">A filesystem
  for virtualization</a></cite>

  <li><cite><a href="https://archive.fosdem.org/2020/schedule/event/vai_virtio_fs/">virtio-fs:
  Shared File System for Virtual Machines</a></cite>

  <li><cite><a href="https://lwn.net/Articles/755593/">Unprivileged
  filesystem mounts, 2018 edition</a></cite>

  <li><cite><a href="https://www.phoronix.com/scan.php?page=news_item&px=VirtIO-DRM-Window-Server">VirtIO
  DRM Window Server Support: Letting Guest VMs Interface With Host's
  Compositor</a></cite>

  <li><cite><a href="https://www.qemu.org/docs/master/interop/vhost-user.html">Vhost-user
  Protocol</a></cite>

  <li><cite><a href="https://wiki.qemu.org/Features/VirtioVhostUser">Features/VirtioVhostUser
  — QEMU</a></cite>

  <li><cite><a href="https://chromium.googlesource.com/chromiumos/third_party/kernel/+/refs/heads/chromeos-5.4/drivers/virtio/virtio_wl.c">Wayland
  Virtio Driver</a></cite>

  <li><cite><a href="https://roscidus.com/blog/blog/2021/03/07/qubes-lite-with-kvm-and-wayland/">Qubes-lite
  With KVM and Wayland</a></cite>

  <li><cite><a href="https://lwn.net/Articles/694291/">An initial
  release of Flatpak portals for GNOME</a></cite>

  <li><cite><a href="https://users.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf">Reflections
  on Trusting Trust</a></cite>

  <li><cite><a href="https://dwheeler.com/trusting-trust/dissertation/wheeler-trusting-trust-ddc.pdf">Fully
  Countering Trusting Trust through Diverse Double-Compiling</a></cite>

  <li><cite><a href="https://reproducible-builds.org/docs/buy-in/">Reproducible
  Builds — Buy-in</a></cite>

  <li><cite><a href="https://edolstra.github.io/pubs/phd-thesis.pdf">The
  Purely Functional Software Deployment Model</a></cite>

  <li><cite><a href="https://nixos.org/features.html">NixOS —
  Features</a></cite>

  <li><cite><a href="https://hal.inria.fr/hal-00824004/document">Functional
  Package Management with Guix</a></cite>

  <li><cite><a href="https://chromium.googlesource.com/chromiumos/platform/crosvm">Chrome
  OS Virtual Machine Monitor</a></cite>

  <li><cite><a href="https://prilik.com/blog/2019/05/16/crosvm-paravirt.html">Paravirtualized
  Devices in crosvm — a Performance Panacea for Modern Virtual
  Machines</a></cite>

  <li><cite><a href="https://assets.amazon.science/96/c6/302e527240a3b1f86c86c3e8fc3d/firecracker-lightweight-virtualization-for-serverless-applications.pdf">Firecracker:
  Lightweight Virtualization for Serverless Applications</a></cite>

  <li><cite><a href="https://github.com/firecracker-microvm/firecracker/blob/master/docs/vsock.md#firecracker-virtio-vsock-design">Firecracker
  Virtio-vsock Design</a></cite>

  <li><cite><a href="https://github.com/cloud-hypervisor/cloud-hypervisor">cloud-hypervisor</a></cite>

</ul>