From owner-svn-doc-head@freebsd.org Tue Jul 14 14:20:29 2015 Return-Path: Delivered-To: svn-doc-head@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 779749A18F7; Tue, 14 Jul 2015 14:20:29 +0000 (UTC) (envelope-from wblock@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 5C43CBF7; Tue, 14 Jul 2015 14:20:29 +0000 (UTC) (envelope-from wblock@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.70]) by repo.freebsd.org (8.14.9/8.14.9) with ESMTP id t6EEKTM3024898; Tue, 14 Jul 2015 14:20:29 GMT (envelope-from wblock@FreeBSD.org) Received: (from wblock@localhost) by repo.freebsd.org (8.14.9/8.14.9/Submit) id t6EEKTsf024897; Tue, 14 Jul 2015 14:20:29 GMT (envelope-from wblock@FreeBSD.org) Message-Id: <201507141420.t6EEKTsf024897@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: wblock set sender to wblock@FreeBSD.org using -f From: Warren Block Date: Tue, 14 Jul 2015 14:20:29 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r46968 - head/en_US.ISO8859-1/htdocs/news/status X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-head@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: SVN commit messages for the doc tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Jul 2015 14:20:29 -0000 Author: wblock Date: Tue Jul 14 14:20:28 2015 New Revision: 46968 URL: https://svnweb.freebsd.org/changeset/doc/46968 Log: Add Ed Schouten 's CloudABI report. Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2015-04-2015-06.xml Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2015-04-2015-06.xml ============================================================================== --- head/en_US.ISO8859-1/htdocs/news/status/report-2015-04-2015-06.xml Tue Jul 14 11:44:59 2015 (r46967) +++ head/en_US.ISO8859-1/htdocs/news/status/report-2015-04-2015-06.xml Tue Jul 14 14:20:28 2015 (r46968) @@ -906,4 +906,69 @@ Steve Kargl decide to call it a day.

+ + + CloudABI: Capability-Based Runtime Environment + + + + + Ed + Schouten + + ed@FreeBSD.org + + + + + CloudABI on GitHub + FreeBSD patchset on GitHub + + + +

CloudABI is a compact UNIX-like runtime environment that is + purely based on capability-based security (Capsicum). All + features that are incompatible with this model have been + removed. Advantages of using a pure capability-based + environment include improved security, testability, and + reusability. CloudABI should make it possible to run + arbitrary third-party executables directly on top of &os; + without any impact on system security, making it a good + building block for a cluster/cloud computing setup. See + the project on GitHub + for a more detailed explanation.

+ +

Last month I added a number of packages for the &os; Ports + tree. We now have a full C/C++ cross compiler that can be + installed very easily + (devel/cloudabi-toolchain). + I also imported a tool called cloudabi-run that can + be used to start programs safely, only granting access to + files and network sockets listed in the program's + configuration file + (sysutils/cloudabi-utils).

+ +

I have also imported some kernelspace modifications into the + &os; source tree for executing CloudABI programs. After all + of these changes have been imported, just loading a kernel + module will allow executing CloudABI programs. Right now, the + "cloudabi" branch on GitHub is still required.

+ + + + Nuxi, the Netherlands + + + + +

Polish up the kernelspace modifications and send them out + for review.

+ + + +

Complete the Linux and NetBSD kernel patchsets and send + those out to the respective maintainers.

+ + +