一作OSDI 2026Oral· Operating Systems & Distributed Systems
JANUS: Cross-World, Cooperative Nested Virtualization for Secure Containers
Jiangshan Lai · Hang Huang · Quan Xu · Zhen Ren · Wenlong Hou · Wei Guo · Jia Rao · Hui Lu · Weidong Han · Jiesheng Wu · Jiang Liu · Naixuan Guan · Yibin Shen · Feng Yu · Xu Wang · Shiqiang Zhang · Zhiheng Tao · Yisheng Xie · Song Wu · Hai Jin
摘要
Secure containers such as Kata Containers strengthen isolation by running each container inside a lightweight VM. On today’s virtualized clouds, this creates an unavoidable form of nested virtualization with dominant cost in memory virtualization. Existing approaches entangle CPU virtualization a...