Abstract

Abstract: The goal of the Crostini project is to run Linux VMs inside of Chrome OS as seamlessly, as securely, and as quickly as possible. In this talk I will be talking about the history of this project and how it all fits together. Because of the Chrome OS team’s attitude of security in depth and principal of least privilege, there are quite a few pieces to talk about. 1) crosvm – The Virtual Machine Monitor that uses a memory safe language and a multi-process paradigm for device isolation 2) LXD Containers – Debian/other linux distribution mechanism 3) Graphics through Wayland – More secure than X11 , but still compatible using Xwayland, and fast thanks to virtio-wayland 4) Network – virtio-net along with localhost development in Chrome 4) Files Integration – From virtio-9p to vsock-9p to virtio-fs 5) UI integration – App Launching over virtio-vsock

Bio: Zach is a Software Engineer working for the Chrome OS Platform team at Google. He graduated from the University of Illinois in Champaign-Urbana with a Bachelor’s degree in Computer Science. For the last few years, Zach has been focusing on improving security in Chrome OS through Rust, writing crosvm, and creating the graphics architecture for crostini.