OCaps via Containers?

2 views
Skip to first unread message

Jonathan S. Shapiro

unread,
Sep 26, 2025, 4:10:00 PM (3 days ago) Sep 26
to friam
Charlie's comment about dropbox URLS led me to a question.

In the KeyKOS/EROS/Coyotos world, we rely on the combination of an extended process (domain) model for capability protection, and transparent persistence for certain kinds of consistency within a single platform.

I'm wondering how well this can be simulated using something like lightweight containers?


Jonathan

Mark S. Miller

unread,
Sep 26, 2025, 6:10:21 PM (3 days ago) Sep 26
to fr...@googlegroups.com
Seems likely to me. VMs too.


--
You received this message because you are subscribed to the Google Groups "friam" group.
To unsubscribe from this group and stop receiving emails from it, send an email to friam+un...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/friam/CAAP%3D3QMb2AikoLMzjic5BY6EzjCWm_drSv%2B%3DTA9hoau%2B3rRUvQ%40mail.gmail.com.

Ben Laurie

unread,
Sep 27, 2025, 4:22:44 AM (2 days ago) Sep 27
to fr...@googlegroups.com
CHERI!

If you want to play, btw, take a look at: https://cheriot.org/

Mark S. Miller

unread,
Sep 27, 2025, 5:02:59 PM (2 days ago) Sep 27
to fr...@googlegroups.com
On Sat, Sep 27, 2025 at 1:22 AM 'Ben Laurie' via friam <fr...@googlegroups.com> wrote:


On Fri, 26 Sept 2025 at 21:10, Jonathan S. Shapiro <jonathan....@gmail.com> wrote:
Charlie's comment about dropbox URLS led me to a question.

In the KeyKOS/EROS/Coyotos world, we rely on the combination of an extended process (domain) model for capability protection, and transparent persistence for certain kinds of consistency within a single platform.

I'm wondering how well this can be simulated using something like lightweight containers?

CHERI!

I took Jonathan's question to be about persistence. What is the relationship of CHERI to persistence? I am not aware of any.
 

If you want to play, btw, take a look at: https://cheriot.org/



Jonathan

--
You received this message because you are subscribed to the Google Groups "friam" group.
To unsubscribe from this group and stop receiving emails from it, send an email to friam+un...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/friam/CAAP%3D3QMb2AikoLMzjic5BY6EzjCWm_drSv%2B%3DTA9hoau%2B3rRUvQ%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "friam" group.
To unsubscribe from this group and stop receiving emails from it, send an email to friam+un...@googlegroups.com.

Ben Laurie

unread,
Sep 28, 2025, 10:45:37 AM (yesterday) Sep 28
to fr...@googlegroups.com
On Sat, 27 Sept 2025 at 22:03, 'Mark S. Miller' via friam <fr...@googlegroups.com> wrote:


On Sat, Sep 27, 2025 at 1:22 AM 'Ben Laurie' via friam <fr...@googlegroups.com> wrote:


On Fri, 26 Sept 2025 at 21:10, Jonathan S. Shapiro <jonathan....@gmail.com> wrote:
Charlie's comment about dropbox URLS led me to a question.

In the KeyKOS/EROS/Coyotos world, we rely on the combination of an extended process (domain) model for capability protection, and transparent persistence for certain kinds of consistency within a single platform.

I'm wondering how well this can be simulated using something like lightweight containers?

CHERI!

I took Jonathan's question to be about persistence. What is the relationship of CHERI to persistence? I am not aware of any.

I was reacting to "lightweight containers". Which CHERI should be very good for.
 
 

If you want to play, btw, take a look at: https://cheriot.org/



Jonathan

--
You received this message because you are subscribed to the Google Groups "friam" group.
To unsubscribe from this group and stop receiving emails from it, send an email to friam+un...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/friam/CAAP%3D3QMb2AikoLMzjic5BY6EzjCWm_drSv%2B%3DTA9hoau%2B3rRUvQ%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "friam" group.
To unsubscribe from this group and stop receiving emails from it, send an email to friam+un...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/friam/CABrd9SQcTdNNaa8exqnRm_H%3DdnjVTBH3NcLX%3DRoS6mSb8wobgw%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "friam" group.
To unsubscribe from this group and stop receiving emails from it, send an email to friam+un...@googlegroups.com.
Reply all
Reply to author
Forward
0 new messages