田洪亮_Asterinas Reimagine Linux in the 2020s with Rust.pdf

1、Asterinas:Reimagine Linux in the 2020s with Rust洪亮 博蚂蚁技术研究院级研究员 北京通明湖中OS内核向负责 星绽项发起Two years ago at OS2ATC24In Dec.2025,we launched Asterinas NixOS,the first OS distro powered by a pure Rust OS kernel业界领先的、基于Rust语言的通用OS内核Since publication in June,there have been just over 16,000 downloads so far,put

2、ting your article into the list of the top 20 articles.An editor of USENIX;login:“Asterinas is certainly a refreshingly innovative take on principles for operating-system development.A journalist at LWN.net“Appreciation for its bold approach to completely do away with a way to do things that is 40 y

3、ears old.A reviewer of SOSP25“安全业界最小可信基性能与Linux对齐通用适用于各种场景开源MPL许可开源社区4年研发时间13万+Rust代码230+Linux系统调用4.4KGithub stars业界首创框内核OS架构宏内核的性能，微内核的安全性ATC25FramekernelATC25ConverosSOSP25CortenMMICSE26RusyFuzzToward a production-grade Linux alternativememory safe,high-performance,and moreToward a production-grad

4、e Linux alternativememory safe,high-performance,and moreRust“fast,reliable,productive:pick three”.New trend:writing safe-language OSes in RustBut even Rust-based OSes include unsafe code(via the unsafe keyword)Towards kernel memory safetyRust“fast,reliable,productive:pick three”.New trend:writing sa

5、fe-language OSes in RustBut even Rust-based OSes include unsafe code(via the unsafe keyword)Towards kernel memory safetyRust for LinuxRedLeaf(OSDI20)Theseus(OSDI20)Figure.The unsafe density of individual crates in a Rust-based OS5/7=71%35/57=61%53/170=31%Rust“fast,reliable,productive:pick three”.New

6、 trend:writing safe-language OSes in RustBut even Rust-based OSes include unsafe code(via the unsafe keyword)Towards kernel memory safety How safe is a safe language OS when unsafe code are so widespread?Rust for LinuxRedLeaf(OSDI20)Theseus(OSDI20)Figure.The unsafe density of individual crates in a