mirror of
https://github.com/hanzoai/visor.git
synced 2026-09-24 17:04:14 +00:00
Tianyu Zhou
fc1afc9de5
SlimVM is a lightweight VMX-based platform for gVisor that accelerates sentry system calls by eliminating unnecessary user/kernel context switches. In a traditional gVisor + KVM setup, every guest syscall triggers a full VM exit to userspace, then re-enters the kernel via a regular syscall: gr0 -> hr0 (vm_exit) -> hr3 (ioctl return) -> hr0 (re-invoke syscall) SlimVM eliminates this overhead. When the guest executes a VMCALL, the VM exits into VMX root mode where SlimVM directly invokes the host kernel's syscall handler, then immediately resumes the guest: gr0 -> hr0 (vmcall + direct function call) SlimVM requires a companion kernel module that provides the /dev/slimvm device interface. See https://github.com/antgroup/slimvm for the kernel module and full documentation. A sentry->host getpid microbenchmark (Xeon 6982P-C, host kernel 5.10.134) shows the effect: │ ns/op │ vs base │ base 82.5 1.0x slimvm 420.9 5.1x kvm 3566.1 43.2x slimvm is ~8.5x faster than the kvm platform on this path. See the issue for details. Updates: https://github.com/google/gvisor/issues/13330 Co-developed-by: Chenggang <[email protected]> Co-developed-by: Robin Luk <[email protected]> Co-developed-by: Tiwei Bie <[email protected]> Co-developed-by: Jianfeng Tan <[email protected]> Co-developed-by: liushi.ls <[email protected]> Co-developed-by: Yong He <[email protected]> Co-developed-by: Aaron Lu <[email protected]> Co-developed-by: chris.zn <[email protected]> Co-developed-by: Lai Jiangshan <[email protected]> Co-developed-by: Lingfu <[email protected]> Co-developed-by: Min Le <[email protected]> Co-developed-by: Quan Xu <[email protected]> Co-developed-by: Zhang Haoyu <[email protected]> Co-developed-by: Dawei Shen <[email protected]> Signed-off-by: Tianyu Zhou <[email protected]>
107 lines
2.7 KiB
Python
107 lines
2.7 KiB
Python
load("//tools:defs.bzl", "go_library", "go_test")
|
|
load("//tools/go_generics:defs.bzl", "go_template", "go_template_instance")
|
|
|
|
package(
|
|
default_applicable_licenses = ["//:license"],
|
|
licenses = ["notice"],
|
|
)
|
|
|
|
[
|
|
# These files are tagged with relevant build architectures. We can always
|
|
# build all the input files, which will be included only in the relevant
|
|
# architecture builds.
|
|
go_template(
|
|
name = "generic_walker_%s" % arch,
|
|
srcs = [
|
|
"walker_generic.go",
|
|
"walker_%s.go" % arch,
|
|
],
|
|
opt_types = [
|
|
"Visitor",
|
|
],
|
|
visibility = [":__pkg__"],
|
|
)
|
|
for arch in ("amd64", "arm64", "arm64_64k")
|
|
]
|
|
|
|
[
|
|
# See above.
|
|
go_template_instance(
|
|
name = "walker_%s_%s" % (op, arch),
|
|
out = "walker_%s_%s.go" % (op, arch),
|
|
package = "pagetables",
|
|
prefix = op,
|
|
template = ":generic_walker_%s" % arch,
|
|
types = {
|
|
"Visitor": "%sVisitor" % op,
|
|
},
|
|
)
|
|
for op in ("map", "unmap", "lookup", "empty", "check")
|
|
for arch in ("amd64", "arm64", "arm64_64k")
|
|
]
|
|
|
|
go_library(
|
|
name = "pagetables",
|
|
srcs = [
|
|
"allocator.go",
|
|
"allocator_unsafe.go",
|
|
"pagetables.go",
|
|
"pagetables_aarch64.go",
|
|
"pagetables_amd64.go",
|
|
"pagetables_arm64.go",
|
|
"pagetables_arm64_4k.go",
|
|
"pagetables_arm64_64k.go",
|
|
"pagetables_x86.go",
|
|
"pcids.go",
|
|
"pcids_aarch64.go",
|
|
"pcids_aarch64.s",
|
|
"pcids_x86.go",
|
|
"walker_amd64.go",
|
|
"walker_arm64.go",
|
|
"walker_arm64_64k.go",
|
|
"walker_generic.go",
|
|
":walker_empty_amd64",
|
|
":walker_empty_arm64",
|
|
":walker_empty_arm64_64k",
|
|
":walker_lookup_amd64",
|
|
":walker_lookup_arm64",
|
|
":walker_lookup_arm64_64k",
|
|
":walker_map_amd64",
|
|
":walker_map_arm64",
|
|
":walker_map_arm64_64k",
|
|
":walker_unmap_amd64",
|
|
":walker_unmap_arm64",
|
|
":walker_unmap_arm64_64k",
|
|
],
|
|
visibility = [
|
|
"//pkg/ring0:__subpackages__",
|
|
"//pkg/sentry/platform/kvm:__subpackages__",
|
|
"//pkg/sentry/platform/slimvm:__subpackages__",
|
|
],
|
|
deps = [
|
|
"//pkg/cpuid",
|
|
"//pkg/hostarch",
|
|
"//pkg/sync",
|
|
],
|
|
)
|
|
|
|
go_test(
|
|
name = "pagetables_test",
|
|
size = "small",
|
|
srcs = [
|
|
"pagetables_amd64_test.go",
|
|
"pagetables_arm64_64k_test.go",
|
|
"pagetables_arm64_test.go",
|
|
"pagetables_common_test.go",
|
|
"pagetables_test.go",
|
|
":walker_check_amd64",
|
|
":walker_check_arm64",
|
|
":walker_check_arm64_64k",
|
|
],
|
|
library = ":pagetables",
|
|
deps = [
|
|
"//pkg/cpuid",
|
|
"//pkg/hostarch",
|
|
],
|
|
)
|