Modular unikernel designed to run applications securely on micro-VMs
osv.io
osv.io
Some companies are powerhouses!
https://www.mikelangelo-project.eu/technology/seastar-librar...
In particular: could it be made to interact correctly with the domU X server? Qubes is on Xen, and has its appVMs run an X server that operate on bitmaps that the domU copies to corresponding regions of its own framebuffer, and is handfed input events by the domU; similarly, sound and camera traffic, and network packets.
I am particularly thinking of e.g. a Firefox appVM that runs Firefox but not systemd; Or, transmission, or element-desktop. Running systemd, and a whole Linux kernel, in every appVM is a big drain on RAM.
So I guess I would need library renditions of the processes Qubes wants to run in its AppVMs, that start a thread when first called. Trick is how to get the app in; maybe it is an "apt" unikernel image that switches to the installed /usr/bin image after running once.
https://github.com/cloudius-systems/osv
And it's part of MIKELANGELO, supported by the Horizon 2020 Framework program of the EU: