JOVE

Overview

JOVE (JIT Compilation of the Linux Kernel in a Virtualized Environment) is a project that enhances SVA [1] to JIT compile the targeted kernel to remove the kernel bytecode itself from the trusted computing base. The SVA compiler instruments the kernel to ensure its safety and that it only operates using SVA intrinsics to access the hardware. JOVE put the SVA compiler into the VMM [2] (using hypercalls for the JIT callbacks) which is not a part of the SVA design, but both protects the compiler itself and avoids engineering issues involved in putting a C++ compiler in early kernel bootstrap code.