0.3 xen-meetup-2025 2025-01-30 2025-01-31 2 00:05 https://cfp.vates.tech Europe/Paris Salles de séminaire 1 Keynote Sessions 2025-01-30T09:30:00+01:00 09:30 00:30 Welcome session, giving the details about the events and why it was created in the first place. xen-meetup-2025-8-welcome-opening-remarks Keynote Sessions Olivier Lambert en Welcome session, giving the details about the events and why it was created in the first place. false https://cfp.vates.tech/xen-meetup-2025/talk/C3E7AK/ https://cfp.vates.tech/xen-meetup-2025/talk/C3E7AK/feedback/ Salles de séminaire 1 Keynote Sessions 2025-01-30T10:00:00+01:00 10:00 00:30 This talk offers a concise yet comprehensive overview of the latest advancements within the Xen ecosystem, focusing on key updates by the Community Manager. xen-meetup-2025-20-xen-project-weather-report Keynote Sessions Kelly Choi en Discover how the Xen community collaborates to drive innovation, and what we've been working on in the past 12 months. You can also expect to gain a deeper understanding of the collaborative efforts shaping the future of Xen and learn how you can contribute too. false https://cfp.vates.tech/xen-meetup-2025/talk/KSJHHX/ https://cfp.vates.tech/xen-meetup-2025/talk/KSJHHX/feedback/ Salles de séminaire 1 Session Presentations 2025-01-30T11:00:00+01:00 11:00 00:30 This session is about presenting the Xen effort regarding Rust integration and projects and future plans regarding the rebuilding the toolstack with Rust. We would like to make a Xen Rust working group to structure more formally this effort. xen-meetup-2025-16-xen-and-rust Session Presentations Teddy Astie en This session is about presenting the Xen effort regarding Rust integration and projects and future plans regarding the rebuilding the toolstack with Rust. We would like to make a Xen Rust working group to structure more formally this effort. I also would like to talk about some recent Xen-Rust related projects including : - xenstore crate: No longer depends on the xenstore C library and some basic Windows support - xen crate: Some progress on ABI stability, and experimental support proper hypercall support for hosted platforms (Linux process) - xen-guest-agent, xcp-metrics false https://cfp.vates.tech/xen-meetup-2025/talk/YZUYWW/ https://cfp.vates.tech/xen-meetup-2025/talk/YZUYWW/feedback/ Salles de séminaire 1 Session Presentations 2025-01-30T11:30:00+01:00 11:30 00:30 In this session, Andrew Cooper, x86 hypervisor maintainer and Xen security team member, will highlight the most pressing challenges in Xen’s codebase today. From technical debt and architectural bottlenecks to security hardening and performance optimizations, Andrew will outline where contributions are most needed and how developers can get involved. xen-meetup-2025-21-key-improvements-contributor-opportunities-in-the-xen-hypervisor Session Presentations Andrew Cooper en Whether you're a seasoned Xen contributor or new to the project, this talk will provide valuable insights into where your expertise can have the greatest impact. false https://cfp.vates.tech/xen-meetup-2025/talk/KPGDEW/ https://cfp.vates.tech/xen-meetup-2025/talk/KPGDEW/feedback/ Salles de séminaire 1 Session Presentations 2025-01-30T12:00:00+01:00 12:00 00:30 In this talk we’re presenting our work at Vates Company of enabling Secure Encrypted Virtualization (SEV) technology for Xen Project open-source hypervisor. SEV is an extension of AMD-V technology and allows to run encrypted virtual machines on the top of “untrusted” hypervisor. Even though the hypervisor still controls the lifecycle of virtual machines, it’s up to SEV enabled guest to decide whether its memory is encrypted or not. The SEV enabled hardware ensures that the hypervisor nor other software (VMs) running on the platform can’t access (decrypt) this memory. In the heart of the SEV technology is the “AMD Secure Processor” hardware component which offers an interface to the system software (hypervisor or guest kernels) allowing to manage virtual machines and the whole platform, so these pieces of software can run and communicate without compromising each other’s security. X86 instruction set was also enriched to fully benefit from SEV technology. We will present our project which targets to integrate SEV extension to Xen hypervisor, the necessary developments and adaptions that have been done, where we are with this project and our future work xen-meetup-2025-12-implementing-amd-sev-technology-in-xen-hypervisor Session Presentations Andrei Semenov en In this talk we’re presenting our work at Vates Company of enabling Secure Encrypted Virtualization (SEV) technology for Xen Project open-source hypervisor. SEV is an extension of AMD-V technology and allows to run encrypted virtual machines on the top of “untrusted” hypervisor. Even though the hypervisor still controls the lifecycle of virtual machines, it’s up to SEV enabled guest to decide whether its memory is encrypted or not. The SEV enabled hardware ensures that the hypervisor nor other software (VMs) running on the platform can’t access (decrypt) this memory. In the heart of the SEV technology is the “AMD Secure Processor” hardware component which offers an interface to the system software (hypervisor or guest kernels) allowing to manage virtual machines and the whole platform, so these pieces of software can run and communicate without compromising each other’s security. X86 instruction set was also enriched to fully benefit from SEV technology. We will present our project which targets to integrate SEV extension to Xen hypervisor, the necessary developments and adaptions that have been done, where we are with this project and our future work false https://cfp.vates.tech/xen-meetup-2025/talk/F3CAAH/ https://cfp.vates.tech/xen-meetup-2025/talk/F3CAAH/feedback/ Salles de séminaire 1 Design Session 2025-01-30T13:15:00+01:00 13:15 00:45 A general discussion on PVH from both guest and Dom0 perspectives. xen-meetup-2025-26-pvh-limitations-requirements-future-considerations Design Sessions en * Trade-offs and key limitations * Required work for PCI passthrough and SR-IOV support * Dom0 feasibility: kernel requirements and long-term viability * Impact on end users compared to HVM simplicity * This session aims to clarify open questions and guide future development priorities. false https://cfp.vates.tech/xen-meetup-2025/talk/CBQFGE/ https://cfp.vates.tech/xen-meetup-2025/talk/CBQFGE/feedback/ Salles de séminaire 1 Design Session 2025-01-30T14:00:00+01:00 14:00 00:45 This session will focus on discussing the current state and key challenges of Nested Virtualization in Xen. xen-meetup-2025-27-future-of-nested-virtualization-in-xen Design Sessions en Together, we’ll define next steps, split the work, and organize upcoming milestones to drive future improvements. false https://cfp.vates.tech/xen-meetup-2025/talk/QZKE9X/ https://cfp.vates.tech/xen-meetup-2025/talk/QZKE9X/feedback/ Salles de séminaire 1 Design Session 2025-01-30T14:45:00+01:00 14:45 00:45 Discuss on the progress and next steps for IOMMU work. xen-meetup-2025-25-xen-iommu-redesign-and-pv-iommu Design Sessions en Follows the similar design session during Xen Summit 2024. Latest patch series : https://lore.kernel.org/xen-devel/cover.1737470269.git.teddy.astie@vates.tech/ false https://cfp.vates.tech/xen-meetup-2025/talk/CGCQFL/ https://cfp.vates.tech/xen-meetup-2025/talk/CGCQFL/feedback/ Foyer Registration and Badge Pick-up 2025-01-30T09:00:00+01:00 09:00 00:30 Get your badge by registering! xen-meetup-2025-10-registration-and-badge-pick-up Registration and Badge Pick-up en Get your badge by registering! false https://cfp.vates.tech/xen-meetup-2025/talk/BAFCHX/ https://cfp.vates.tech/xen-meetup-2025/talk/BAFCHX/feedback/ Social Events Social Events 2025-01-30T17:00:00+01:00 17:00 02:00 ACONIT, the Association for a Conservatory of Information Technology, founded in 1985 with principle objective of preserving the history of computing and creating tools to better understand and explain to the general public the risks and rewards of current developments in the information processing as it permeates deeper into society. ## Address Aconit 12 Rue Joseph Rey 38100 Grenoble xen-meetup-2025-13-aconit-exhibit-thursday Social Events en An extensive collection, among the largest in Europe, has been constituted comprising of machines, software, documentation and other artifacts. false https://cfp.vates.tech/xen-meetup-2025/talk/WJLQN9/ https://cfp.vates.tech/xen-meetup-2025/talk/WJLQN9/feedback/ Social Events Social Events 2025-01-30T20:00:00+01:00 20:00 02:00 Located in the heart of Grenoble, La Fondue offers a warm and authentic atmosphere, perfect for wrapping up our event with great food and conversation. Known for its traditional Savoyard cuisine, the restaurant specializes in rich, flavorful cheese fondue, hearty raclette, and other regional delights. ## Address La Fondue 5 Rue Brocherie 38000 Grenoble xen-meetup-2025-15-restaurant-la-fondue Social Events en It’s the perfect spot to relax, enjoy local flavors, and continue discussions in a more informal setting. false https://cfp.vates.tech/xen-meetup-2025/talk/VN9APB/ https://cfp.vates.tech/xen-meetup-2025/talk/VN9APB/feedback/ Salles de séminaire 1 Session Presentations 2025-01-31T09:30:00+01:00 09:30 00:30 This talk will explore challenges and proposed strategies for implementing UEFI Secure Boot within Xen and downstream distributions like XCP-ng or Qubes OS, focusing on how these changes can enhance security and contribute to a more unified framework for future development. We will begin by examining why UEFI Secure Boot is essential in continuing the transitive chain established by the modern static root of trust, and its synergy with TrenchBoot and DRTM technology. We will delve into the implications of the UEFI Secure Boot process, showing why simply signing bootloaders and hypervisor binaries is insufficient; a comprehensive implementation must address the entire boot chain. xen-meetup-2025-2-enabling-uefi-secure-boot-in-xcp-ng-establishing-a-robust-chain-of-trust Session Presentations Piotr Król en Throughout the presentation, we will navigate the technical complexities of effectively integrating UEFI Secure Boot in Xen. Some obstacles include: - Support for SBAT: We will discuss the mandated adoption of SBAT for signing Xen code and the prerequisite implementation of NX_COMPAT, which is critical for UEFI Secure Boot compatibility. - Kexec and Livepatching: the necessity for integrity checks using SHA256 during kexec operations and the requirement for signature verification for live patches. - Command Line Handling: how command-line parameters can introduce vulnerabilities unless carefully managed, which must be resolved for an implementation that can maintain a chain of trust. - Memory Layout Compatibility: challenges presented by PE file formats and their interactions with Xen's memory layout demands. Community input is critical to ensure that the proposed changes align with practical use cases and user requirements. We will articulate a potential roadmap for progressing toward full UEFI Secure Boot support in Xen, with collaborative development and user requirements guiding change. By elucidating the roadmap, we aim to motivate stakeholders to engage in dialogue prioritizing secure launch technologies as essential components of a modern virtualization strategy. false https://cfp.vates.tech/xen-meetup-2025/talk/8JBQKC/ https://cfp.vates.tech/xen-meetup-2025/talk/8JBQKC/feedback/ Salles de séminaire 1 Session Presentations 2025-01-31T10:00:00+01:00 10:00 00:30 Malware analysis sandboxes use virtual machine introspection (VMI) to analyze malware samples. VMI is a set of techniques to monitor the execution of a virtual machine (VM) while remaining isolated from the VM. Some so-called evasive malware detects VM execution pauses caused by VMI to avoid exhibiting their malicious behavior. This problem tends to disappear since sandbox designers manipulate the VM clock to hide these pauses. On the other hand, the fake network created by a sandbox offers new opportunities to evasive malware. Indeed, VMI pauses have a measurable impact on network performance. In this way, malware can detect performance differences between the observed network and the network of the target system. To solve this problem, the TANSIV approach consists in building the sandbox network on top of a discrete-event network simulator. The simulator defines the time reference and TANSIV coordinates the flow of time, by synchronizing the virtual clocks with the simulator clock. Packets emitted by the VMs are intercepted and transmitted to the destination VM at the virtual time calculated by the simulator. The VMs are regularly interrupted to resynchronize them with the network simulator. In the case of hardware virtualization, in addition to manipulating the virtual clocks to hide VMI pauses, TANSIV hides the synchronization pauses with the network simulator. TANSIV is portable between hypervisors and has been ported on the Xen hypervisor. Moreover TANSIV has been integrated with DRAKVUF, an open-source Xen-based hypervisor which leverages VMI to analyze Xen guests. Our results show that TANSIV is able to hide the impact of VMI pauses both on local and network timings. xen-meetup-2025-24-hiding-vmi-pauses-on-a-networked-xen-based-sandbox-with-tansiv Session Presentations Léo Cosseron en This presentation introduces TANSIV, an academic project aimed at making sandboxes stealthy regarding network-based timing analysis techniques. By synchronizing the VM clocks with a network simulator, TANSIV can eliminate detectable execution pauses caused by malware analysis tools, such as Virtual Machine Introspection (VMI) techniques. The talk with then focus on the Xen port of TANSIV in order to integrate it with the open-source Xen-based sandbox DRAKVUF. A short demo of TANSIV will be shown. false https://cfp.vates.tech/xen-meetup-2025/talk/YJG3DV/ https://cfp.vates.tech/xen-meetup-2025/talk/YJG3DV/feedback/ Salles de séminaire 1 Session Presentations 2025-01-31T11:00:00+01:00 11:00 00:30 Live migration of virtual machines is a concept highly used in cloud computing environments for various reasons such as server upgrades, consolidation to reduce energy consumption, etc. This migration however faces several challenges when taking place between servers that present a heterogeneous set of processors. It is important to properly characterize this heterogeneity as well as evaluate its impact on virtual machine migration within the context of a data center. Our work aims at providing an extensive characterization of migration issues related to processor heterogeneity and propose an amelioration to the virtual machine migration algorithm in the context. xen-meetup-2025-7-characterizing-live-migration-of-virtual-machines-between-heterogeneous-cpus Session Presentations Alain TchanaCALEB FONYUY-ASHERI SUUYNYUY en Live migration of virtual machines is a concept highly used in cloud computing environments for various reasons such as server upgrades, consolidation to reduce energy consumption, etc. This migration however faces several challenges when taking place between servers that present a heterogeneous set of processors. It is important to properly characterize this heterogeneity as well as evaluate its impact on virtual machine migration within the context of a data center. Our work aims at providing an extensive characterization of migration issues related to processor heterogeneity and propose an amelioration to the virtual machine migration algorithm in the context. false https://cfp.vates.tech/xen-meetup-2025/talk/VZMUDK/ https://cfp.vates.tech/xen-meetup-2025/talk/VZMUDK/feedback/ Salles de séminaire 1 Session Presentations 2025-01-31T11:30:00+01:00 11:30 00:30 This session will delve into the current state of Q35 and aim to agree on the technical approach for achieving robust PCIe device support. xen-meetup-2025-30-enhancing-q35-support-in-xen Session Presentations Thierry Escande en Initial a planned design session, it has been swapped to a regular talk. false https://cfp.vates.tech/xen-meetup-2025/talk/TQK8A8/ https://cfp.vates.tech/xen-meetup-2025/talk/TQK8A8/feedback/ Salles de séminaire 1 Session Presentations 2025-01-31T12:00:00+01:00 12:00 00:30 In order to provide a IaaS experience to Clever Cloud customers, we decided to work on a "Xen as a Service" approach. In this presentation, I will recollect the challenges and choices we made to run xcp-ng inside our VMs. xen-meetup-2025-3-rex-integrating-xcp-ng-xoa-as-a-service Session Presentations Julien Durillon en This talk will cover the issues, challenges and the answers we found: - how to run a Xen hypervisor in a VM - how to manage a XOA + xcp-ng in a cloud architecture - how to handle the network - … false https://cfp.vates.tech/xen-meetup-2025/talk/V7APHR/ https://cfp.vates.tech/xen-meetup-2025/talk/V7APHR/feedback/ Salles de séminaire 1 Design Session 2025-01-31T13:15:00+01:00 13:15 00:45 This session aims to bridge the gap between research labs and the Xen Project by identifying synergies and mutual benefits. We’ll discuss how Xen can support academic research, how research can contribute to Xen’s evolution, and potential papers to increase Xen’s visibility. xen-meetup-2025-28-strengthening-collaboration-between-xen-and-academia Design Sessions en Maintainers and contributors will provide input to help researchers navigate the project efficiently, fostering stronger collaboration and impactful contributions. false https://cfp.vates.tech/xen-meetup-2025/talk/97DWC3/ https://cfp.vates.tech/xen-meetup-2025/talk/97DWC3/feedback/ Salles de séminaire 1 Design Session 2025-01-31T14:00:00+01:00 14:00 00:45 (Note: may only happen if someone more knowledgeable of the topic than me can lead the sessions) A practical session to discover Xen’s codebase structure, and maybe how to do a small example modification. Also: how to navigate the dozens git repositories on xen.org. xen-meetup-2025-31-getting-started-with-xen-s-codebase Design Sessions en Outcome: if no documentation exists on this topic, let’s contribute one based on this session at the end? false https://cfp.vates.tech/xen-meetup-2025/talk/NJKMWN/ https://cfp.vates.tech/xen-meetup-2025/talk/NJKMWN/feedback/ Salles de séminaire 1 Design Session 2025-01-31T14:45:00+01:00 14:45 00:45 Since XSA-351, coretemp and similar modules can no longer be used in Dom0 for hardware data access. xen-meetup-2025-29-better-hardware-power-management Design Sessions en In this session, we’ll review how Xen and Dom0 interact with hardware, discuss current limitations, and explore potential directions for secure and viable solutions. false https://cfp.vates.tech/xen-meetup-2025/talk/HV3Q3E/ https://cfp.vates.tech/xen-meetup-2025/talk/HV3Q3E/feedback/ Foyer Registration and Badge Pick-up 2025-01-31T09:00:00+01:00 09:00 00:30 Get your badge by registering! xen-meetup-2025-11-registration-and-badge-pick-up Registration and Badge Pick-up en Get your badge by registering! false https://cfp.vates.tech/xen-meetup-2025/talk/TFMSTP/ https://cfp.vates.tech/xen-meetup-2025/talk/TFMSTP/feedback/ Social Events Social Events 2025-01-31T17:00:00+01:00 17:00 02:00 ACONIT, the Association for a Conservatory of Information Technology, founded in 1985 with principle objective of preserving the history of computing and creating tools to better understand and explain to the general public the risks and rewards of current developments in the information processing as it permeates deeper into society. ## Address Aconit 12 Rue Joseph Rey 38100 Grenoble xen-meetup-2025-14-aconit-exhibit-friday Social Events en An extensive collection, among the largest in Europe, has been constituted comprising of machines, software, documentation and other artifacts. false https://cfp.vates.tech/xen-meetup-2025/talk/ACWJUB/ https://cfp.vates.tech/xen-meetup-2025/talk/ACWJUB/feedback/