The Moth Separation kernet is a pet project trying to define a very minimal microkernel where tasks are isolated from each others by MMU. The goal is for the kernel binary (not counting MMU tables) to fit in one or two memory pages (4KB to 8KB). So the code needs to be very minimal with only mandatory features.

Moth implements a cooperative scheduler and therefore tasks are not preemptible. This means a tasks can keep the CPU as long as it needs and must release it explicitely through a system call to allow other tasks to run.

Moth has only 5 system calls:

• yield: to release the processor if another task is ready to run
• wait: to wait for a mailbox from another task
• mbx_send: to send a mailbox message to another task
• mbx_receive: to retreive a mailbox sent by another task
• exit: to end a task

These are the only services provided by the Moth kernel. All other features (drivers, interrupt handling, timer services) need to be provided by tasks from user space.

All tasks are linked-in at proper memory location in the Moth binary during the build process and therefore they are all created/present at start time (there is no dynamic loading of tasks).

Moth is writen in SPARK, C and assembly language.

SPARK is a formal langage that allow to prove that the code does not contain any runtime error.

Separation Kernel definition borowed from MUEN

A Separation Kernel (SK) is a specialized microkernel that provides an execution environment for components that exclusively communicate according to a given security policy and are otherwise strictly isolated from each other. The covert channel problem, largely ignored by other platforms, is addressed explicitly by these kernels. SKs are generally more static and smaller than dynamic microkernels, which minimizes the possibility of kernel failure, enables the application of formal verification techniques and the mitigation of covert channels.

Kernel

The following list outlines the most-prominent features of the Moth kernel:

• Minimal SK for the Sparc architecture written in SPARK, C and assembly
• Full availability of source code and documentation
• Static MMU table built at compile time
• Static Communication policy built at compile time
• Mbx mechanism for inter-partition synchronization
• Shared memory for inter-partition communication
• cooperative non interruptible scheduling

Tools

• XSL script to generate static MMU table from an XML description
• XSL script to generate linker files fron an XML description
• XSL script to generate static/read-only task description from XML description

Documentation

The following detailed project documentation is available:

Mailing list

TBD

The Moth SK has been developed and successfully tested using the development environment listed in the following table.

The following hardware is used for the development of Moth.

The first step to build Moth is to install the required packages:

Development tools

$ sudo apt-get install xsltproc gcc-sparc64-linux-gnu libncurses5 make binutils gcc git gnat-10 gnat-10-sparc64-linux-gnu

Qemu

$ sudo apt-get install qemu-system-sparc

tsim

You can also install the tsim LEON3 simulator from gaisler. You will find it at the following address: http://www.gaisler.com/index.php/downloads/simulators . There is free evaluation version you can use. It has some limitation such as stoping the application after 2^32 clock cycles but it is cycle acurate and is more precise in the emulation (for example it emulates the cache).

The Moth sources are available through the following git repository:

$ git clone https://github.com/jcdubois/moth.git

A browsable version of the repository is available here:

https://github.com/jcdubois/moth

A ZIP archive of the current Moth sources can be downloaded here:

https://github.com/jcdubois/moth/archive/master.zip

Once done, you can build Moth:

$ cd /moth/install/directory/
$ export CROSS_COMPILE=sparc64-linux-gnu-
$ make ARCH=sparc leon3-qemu-defconfig
$ make

For now we only support Simulators. Real platforms should come later.

Qemu

$ qemu-system-sparc -M leon3_generic -display none -no-reboot -serial stdio -kernel build/moth.elf

tsim

$ tsim-leon3 -mmu build/moth.elf
tsim> go

TBD

Copyright (C) 2020 Jean-Christophe Dubois [email protected]

This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or (at your option) any later version.