Qualcomm Posts Linux Driver Patches For New "Gunyah" Hypervisor

[phoronix]

Phoronix: Qualcomm Posts Linux Driver Patches For New "Gunyah" Hypervisor

Qualcomm by way of their QuiC innovation center have been developing Gunyah as an open-source type-1 hypervisor. Posted on Wednesday were the initial patches providing Linux driver support for Gunyah...

https://www.phoronix.com/scan.php?page=news_item&px=QuiC-Gunyah-Hypervisor-Linux-v1

[tildearrow]

The QuiC name is the same as the QUIC protocol... (good thing it's HTTP/3 now)

[uid313]

I heard rumors about Android 13 getting support for virtualization.

The QuiC name is the same as the QUIC protocol... (good thing it's HTTP/3 now)

QUIC is not HTTP/3 now.
HTTP/3 is a binary application-layer protocol over QUIC which is a transport-layer protocol. So you can use QUIC for other things than HTTP/3.
HTTP/3 is basically HTTP/2 but over the QUIC transport-layer protocol instead of TCP.

[direc85]

I'm not into hypervisors at all, so could someone explain why is everybody writing their own hypervisors nowadays? Why do we need a software controlling what the operating system does, especially in mobile phones and such? Isn't that the kernels job?

[Quackdoc]

I heard rumors about Android 13 getting support for virtualization.

this is seperate, android will be using KVM still with a modified version of crosvm the chromeOS vmm. (also the basis of a few other notable VMMs)

[Quackdoc]

I'm not into hypervisors at all, so could someone explain why is everybody writing their own hypervisors nowadays? Why do we need a software controlling what the operating system does, especially in mobile phones and such? Isn't that the kernels job?

Hypervisors are very complicated system's that facilitate sharing resources between multiple kernels. this may sound simple in theory, but it is anything but. so having a dedicated hypervisor tuned to your system can give you the edge over other things, which can matter a lot when you are doing things at a larger scale.

as for why a phone may need this, I for one would love it, because it would allow me to have a safe encrypted linux VM within android for instance. (if implemented properly) meaning if you run a VPN with the VM for instance, you could have a linux enviroment completely secure from the host (yes I know, if you don't trust the host, don't trust the guest this is just theory crafting)

[marmarama]

This is probably to allow Qualcomm to run the baseband software that implements the 2G/3G/4G/5G protocols for future Snapdragons on the main application processor rather than a separate baseband processor as is the case on most smartphones.

Baseband software is closed-source, full of trade secrets, timing and security sensitive, and probably full of unintentional and intentional backdoors, which is why a hypervisor approach to compartmentalization is desired, and why they want to use their hypervisor rather than anything that already exists.

Running the baseband software on the application processor under a real-time hypervisor was common in the 2G/3G late feature phone/early smartphone era but became less common with 4G, as running 4G in software on the application processor was quite taxing. Now it looks like application processors are fast enough to run the 4G and 5G baseband without breaking a sweat, so this approach is having a revival.

In theory this should reduce overall power consumption and thus increase battery life, and it will also reduce the component count on phone mainboards which should make the bill of materials a little lower.

[edwaleni]

AT&T already runs KVM and containers in their 5G nodes at the tower. They migrated their network controls and many of the features to them during Covid. So I am not shocked that someone wants the actual mobile devices to do the same.

Addendum: AT&T even spun off their Kubernetes tools back to the community for mobile, so who knows if they will use it to extend specific (KVM or whatever) functionality to their branded phones going forward?

[linuxgeex]

I'm not into hypervisors at all, so could someone explain why is everybody writing their own hypervisors nowadays? Why do we need a software controlling what the operating system does, especially in mobile phones and such? Isn't that the kernels job?

TLDR; this is primarily about battery life in mobile devices.

The specific reason you're seeing this recently on ARM is that TrustZone is slow, which forces mobile devices to stay awake or in a higher performance power state than they would otherwise need to if they could complete their trusted computing tasks with lower latency. So they are using hypervisors on the application cores to speed up Trusted Execution Environment performance. It also means they can drop TEE extensions from their designs, which can save them a buck on licensing.

In the long term it means that the manufacturers will be able to install backdoors and ad/tracking features below the OS (even flashing a new OS image will not replace this), so you could see ads on devices when they are sleeping... that's unlikely on mobile but you can expect it soon on TVs.

[skeevy420]

In the long term it means that the manufacturers will be able to install backdoors and ad/tracking features below the OS (even flashing a new OS image will not replace this), so you could see ads on devices when they are sleeping... that's unlikely on mobile but you can expect it soon on TVs.

I suppose the silver lining is the phone hackers can target the hypervisor to hopefully get full control of the device and use that to get around a lot of the root limitations.