mic_none

Genode Source: en.wikipedia.org/wiki/Genode

Genode
The desktop system Sculpt based on Genode
DeveloperGenode Labs
Written inC++
Working stateCurrent
Source modelOpen source
Initial release2008; 17 years ago (2008)
Latest release25.05[1] Edit this on Wikidata / 28 May 2025; 30 days ago (28 May 2025)
Repositorygithub.com/genodelabs/genode
Marketing targetDesktop computers
Embedded systems
Available inEnglish
PlatformsARM, RISC-V, x86-64
Kernel typeMicrokernel
UserlandGenode, POSIX
LicenseAGPL-3.0-only and commercial
Official websitegenode.org

Genode is a novel OS architecture that aims to improve software safety by applying a strict organizational structure to all software components including device drivers, system services, and applications.

Within the Genode project, the Operating System framework is an open-source tool kit for building highly secure component-based operating systems, whereas Sculpt is a pre-built distribution for personal computers and smartphones.

Genode is frequently used in academia for computer science research.

History

[edit]

Genode was first conceived as the Bastei OS Architecture[2] research report at the Technical University of Dresden (TU Dresden). The focus of the report was to determine the practicality of a component-based OS using capability-based security. This work was influenced by concurrent research at Dresden into virtualisation and microkernels which would itself mature into the NOVA microhypervisor[3] subsequently adopted as the Sculpt kernel. Following the success of an early prototype, the authors of the report founded the company Genode Labs to develop Bastei as the Genode OS Framework.

Overview

[edit]

Genode OS framework is a tool kit for building highly secure special-purpose operating systems. It scales from embedded systems with as little as 4 MB of memory to highly dynamic general-purpose workloads.[4]

Design concepts

[edit]

The system is based on a recursive structure. Each program is executed in a dedicated sandbox and gets granted only those access rights and resources that are required to fulfill its specific purpose. Programs can create and manage sub-sandboxes out of their own resources, thereby forming hierarchies where policies can be applied at each level. The framework provides mechanisms to let programs communicate with each other and trade their resources, but only in strictly-defined manners. Thanks to this rigid regime, the attack surface of security-critical functions can be reduced by orders of magnitude compared to contemporary operating systems.[4]

The framework aligns the construction principles of microkernels with Unix philosophy. In line with Unix philosophy, Genode is a collection of small building blocks, out of which sophisticated systems can be composed. But unlike Unix, those building blocks include not only applications but also all classical OS functionalities including kernels, device drivers, file systems, and protocol stacks.[4]

Features

[edit]

CPU architectures

[edit]

Genode supports the x86 (32 and 64 bit), ARM (32 and 64 bit), and RISC-V (64 bit) CPU architectures. On x86, modern architectural features such as IOMMUs and hardware virtualization can be utilized. On ARM, Genode is able to take advantage of TrustZone and virtualization technology.[4]

Kernels

[edit]

Genode can be deployed on a variety of different kernels including most members of the L4 microkernel family (NOVA, seL4, Fiasco.OC, OKL4 v2.1, L4ka::Pistachio, L4/Fiasco). Furthermore, it can be used on top of the Linux kernel kernel to attain rapid development-test cycles during development. Additionally, the framework is accompanied with a custom microkernel that has been specifically developed for Genode and thereby further reduces the complexity of the trusted computing base compared to other kernels.[4]

Virtualization

[edit]

Genode supports virtualization at different levels:

  • Using NOVA or Genode's custom kernel, faithful virtualization via VirtualBox allows for the execution of unmodified guest operating systems as Genode subsystems. Alternatively, the Seoul virtual machine monitor can be used to run unmodified Linux-based guest OSes.
  • On ARM, Genode can be used as TrustZone monitor, or as a virtual machine monitor that facilitates ARM's virtualization extensions.[4]

Building blocks

[edit]

The Framework consists of hundreds of ready-to-use components such as:

  • Device drivers for most common PC peripherals including networking, storage, display, USB, PS/2, Intel wireless, Intel GPUs, and audio.
  • Device drivers for a variety of ARM-based SoCs, in particular the NXP i.MX family.
  • A GUI stack including a low-complexity GUI server, window management, and widget toolkits such as Qt.
  • Networking components such as TCP/IP stacks and packet-level network services.
  • Applications based on the POSIX interface, including GNU coreutils, bash, GCC, binutils, and findutils.[4]

Releases

[edit]

Genode is offered as free and open source software with commercial licencing available on request.[5]

OS Framework

[edit]

Updates are released quarterly.[6] Development follows a roadmap for each year with longer term aspirations listed separately.[7]

Sculpt

[edit]

Pre-built general purpose operating system for commodity PC hardware and the PinePhone. As Genode Labs' in-house distribution Sculpt is used daily by the Genode developers.[8]

The design of the user interface is guided by the underlying design philosophy of Genode and thus diverges from mainstream convention.[9] This approach is typified by "Leitzentrale", an interactive chart of the system components, accessible at any time. A sizeable library applications have been ported to Sculpt from KDE.

The name "Sculpt" derives from the intention for users to sculpt their own desktop incorporating only their desired components.[10]

Documentation

[edit]

Genode Labs maintain extensive documentation of their products.[11] The master reference is "Genode Foundations" which provides a holistic description of the Framework and is revised annually. This is supported by "Genode Applications" which covers developing and porting applications to Genode, and "Genode Platforms" which deals with low level and hardware related topics.

Reception

[edit]

Genode acknowledge that the unorthodox interface of Sculpt may intimidate some users.[10] Bryan Lunduke regards Sculpt as the "weirdest" contemporary operating system.[12]

See also

[edit]
  • HelenOS, a desktop microkernel based operating system
  • QNX, a proprietary Unix-like operating system hosted by a microkernel
  • Qubes OS, a desktop operating system that provides security through virtualization
  • Fuchsia, a capability based OS from Google
  • Capability-based security

References

[edit]
  1. ^ "Release 25.05". 28 May 2025. Retrieved 15 June 2025.
  2. ^ Feske, Norman; Chelmuth, Christian (2007-01-04). "Design of the Bastei OS Architecture" (PDF). Institute for System Architecture, Operating Systems Group, Technische Universität Dresden. Retrieved 2025-04-16.
  3. ^ "NOVA Microhypervisor". Nova Microhypervisor. Retrieved 16 April 2025.
  4. ^ a b c d e f g Feske, Norman (May 2024). "Genode Foundations". Genode. pp. 14–15. Retrieved 2025-04-14.
  5. ^ "Commercial licensing and support by Genode Labs". Genode. Retrieved 16 April 2025.
  6. ^ "Download". Genode. Retrieved 2025-04-14.
  7. ^ "About Genode". genode.org. Retrieved 2025-04-14.
  8. ^ "Pre built Sculpt OS images". Genode. Retrieved 2025-04-14.
  9. ^ Feske, Norman (2023-01-05). "Mobile user interface, not in the face!". Genodians. Retrieved 2025-04-14.
  10. ^ a b Feske, Norman (30 January 2025). "A casual Sculpt OS walkthrough". Genodians. Retrieved 16 April 2025.
  11. ^ "Documentation of the Genode OS Framework". Genode. Retrieved 2025-04-14.
  12. ^ Lunduke, Bryan (2022-05-10). "Genode - Sculpt : The weirdest Operating System?". The Lunduke Journal of Technology. Retrieved 2025-04-14.
[edit]
Wikimedia Commons has media related to Genode.
Official websites
Research projects