We present unikernels, a new approach to deploying cloud services via applications written
in high-level source code. Unikernels are single-purpose appliances that are compile-time …

Dune is a system that provides applications with direct but safe access to hardware features
such as ring protection, page tables, and tagged TLBs, while preserving the existing OS …

Virtual machines in the cloud typically run existing general-purpose operating systems such
as Linux. We notice that the cloud's hypervisor already provides some features, such as …

Security isolation is a foundation of computing systems that enables resilience to different
forms of attacks. This article seeks to understand existing security isolation techniques by …

This paper revisits an old approach to operating system construc-tion, the library OS, in a
new context. The idea of the library OS is that the personality of the OS on which an …

Library OSes are a promising approach for applications to efficiently obtain the benefits of
virtual machines, including security isolation, host platform compatibility, and migration …

This paper presents Unikernel Linux (UKL), a path toward integrating unikernel optimization
techniques in Linux, a general purpose operating system. UKL adds a configuration option …

Linux®, or more specifically, the Linux API, plays a key role in HPC computing. Even for
extreme-scale computing, a known and familiar API is required for production machines …

General purpose operating systems sacrifice per-application performance in order to
preserve generality. On the other hand, substantial effort is required to customize or …

Mobile System-on-Chips (SoC) that incorporate heterogeneous coherence domains
promise high energy efficiency to a wide range of mobile applications, yet are difficult to …