Tock began 10 years ago as a research operating system developed by academics to help other academics build urban sensing applications. By leveraging a new language (Rust) and new hardware protection mechanisms, Tock enabled Multiprogramming a 64 kB Computer Safely and Efficiently. Today, it is an open source project with a vibrant community of users and contributors. It is deployed on root of trust hardware in data center servers and on millions of laptops; it is used to develop automotive and space products, wearable electronics, and hardware security tokens--all while remaining a platform for operating systems research. This paper focuses on the impact of Tock's technical design on its adoption, the challenges and unexpected benefits of using a type safe language (Rust)--particularly in security sensitive settings--and the experience of supporting a production open4source operating system from academia.
翻译:Tock诞生于10年前,起初是学术界为帮助研究者构建城市感知应用而开发的一款实验性操作系统。通过利用新型编程语言Rust与全新硬件保护机制,Tock实现了在64KB微型计算机上的安全高效多任务处理。如今,它已发展为一个拥有活跃用户与贡献者社群的开源项目,既部署于数据中心服务器的信任根硬件中,也运行在数百万台笔记本电脑上;既用于汽车与航天产品、可穿戴电子设备及硬件安全令牌的开发,同时仍作为操作系统研究的实验平台。本文重点探讨:Tock技术设计对其推广应用的影响,在安全敏感场景下使用Rust类型安全语言所面临的挑战与意外收获,以及从学术界支撑一款生产级开源操作系统的实践经验。