Helios

Oxide and Friends · 1 Feb 2024 · 1h 47m · Episode 4

What this episode covers

Josh Clulow, a software engineer at Oxide Computer Company, explains the architecture and release of Helios, an illumos-based operating system designed for Oxide's rack-scale computers. He details the decision to bypass traditional UEFI firmware in favor of a custom Rust bootloader and kernel initialization to ensure deterministic, single-pass hardware bring-up. The team also discusses the challenges of integrating Rust Tier 2 support, managing the IPS packaging system, and maintaining a close relationship with upstream illumos to avoid the 'quality death spiral' associated with downstream forks.

Mentioned

Products
Helios, OmniOS, OpenIndiana, Cockroach, ClickHouse
Also
illumos, OpenSolaris, Solaris, Rust, ZFS, UEFI, IPS, NOR Flash, NVMe

Other shows on the same ground, closest first.

  • Embedded.fm · 57m

    342: That Girl's Brain

    Jessie Frazelle, Co-Founder and Chief Product Officer at Oxide Computer, explains how the company builds open-source, rack-scale servers for enterprises by adopting hyperscaler-style hardware design. She details the decision to open-source firmware and hardware to eliminate vendor finger-pointing and security vulnerabilities inherent in proprietary BMCs. The discussion covers their use of Rust for firmware and control plane software, power efficiency metrics like PUE, and the challenges of deploying high-density compute in traditional colocation environments.

  • The Amp Hour · 57m

    Finding Hardware Flaws with Laura Abbott

    Laura Abbott, an engineer at Oxide Computer, discusses her accidental discovery of a buffer overflow vulnerability in the ROM update mechanism of the NXP LPC55S69 microcontroller while working on Oxide's server root of trust. She explains how Oxide is rebuilding the server from the ground up with a focus on hardware security, utilizing their open-source operating system Hubris and the Rust programming language to mitigate risks like memory safety issues. The conversation covers the architecture of the server's secure components, including the service processor and TrustZone-M, as well as the challenges of remote hardware debugging and contributing to the Linux kernel community.

  • The Pragmatic Embedded Podcast · 48m

    Offensive Cybersecurity with Ryan Torvik

    Ryan Torvik, founder and CEO of Tulip Tree Technology, explains the offensive cybersecurity mindset and how it applies to securing embedded systems. He details techniques for extracting and analyzing firmware using tools like IDA Pro and Ghidra, and discusses the importance of designing security from the start, including using standard libraries and secure languages like Rust. Torvik also describes Tulip Tree's emulation technology, which models hardware behavior to allow developers to test firmware and detect vulnerabilities without physical hardware.

  • Embedded.fm · 56m

    93: Delicious Gumbo

    Joel Sherrill, project lead for the RTEMS real-time operating system, discusses the history, architecture, and community of the open-source RTOS he has led for 25 years. He explains how RTEMS balances the needs of hobbyists and mission-critical space applications by maintaining deterministic, predictable code while keeping a small footprint. Sherrill details the rigorous selection and management process for Google Summer of Code and ESA Summer of Code interns, highlighting the program's role in sustaining the project's development.

  • The Pragmatic Embedded Podcast · 45m

    Zephyr with Luka Mustafa

    Luka Mustafa, founder and CEO of Irnas Product Development, explains how Zephyr RTOS, a Linux Foundation-backed project, enables hardware-agnostic embedded development by abstracting low-level details through device trees and a comprehensive ecosystem. He highlights the dramatic reduction in porting time—moving Bluetooth code between chip architectures in an hour versus months—and the ability to run native POSIX simulations on Linux for faster development. Mustafa also details Zephyr's testing framework, Twister, and its cultural impact, noting the steep learning curve for electrical engineers while emphasizing the long-term benefits of code reuse and reduced maintenance overhead. The discussion covers resource constraints, safety-critical certification processes, and specific scenarios where simpler solutions like Arduino are preferable to an RTOS.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Oxide and Friends. The episode itself belongs to its publisher.