Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[oniro-wg] Proposal: Secure x86 Binary Execution on ARM for Oniro/OpenHarmony via StratoVirt and KVM API

Dear Oniro Working Group,

I hope this email finds you well. I’m reaching out to propose a collaboration opportunity that aligns with Oniro’s goals of cross-architecture compatibility, security, and modularity.

Background

Many ARM-based devices such as HarmonyOS, including those running Oniro, face challenges executing legacy x86 binaries—particularly for gaming, enterprise applications, or compatibility layers. To address this, we’ve been exploring a solution that combines:

  • OpenAtom openEuler StratoVirt: A lightweight, Rust-based VMM (Virtual Machine Monitor) leveraging KVM for secure, hardware-accelerated virtualization.
  • OpenHarmony KVM API: Extensions to enable ABI emulation (e.g., via QEMU user-mode or FEX) and Vulkan graphics passthrough for gaming workloads.
  • Microsoft LiteBox/FEX-emu's FEX Integration: Microsoft’s LiteBox provides a secure sandbox for unmodified Linux binaries on Windows, while FEX-emu's FEX (Fast Emulator for x86) enables efficient x86-on-ARM emulation. We propose adapting these tools for Oniro to bridge the gap for x86 compatibility.

Proposal

We’d like to collaborate with the Oniro community to:

  1. Integrate StratoVirt as an optional runtime for Oniro, enabling secure execution of x86 workloads on ARM devices via KVM and QEMU/FEX.
  2. Extend Oniro’s KVM API to support ABI emulation and Vulkan passthrough, ensuring compatibility with gaming and graphics-intensive applications.
  3. Leverage LiteBox’s security model to minimize attack surfaces, aligning with Oniro’s focus on safety and modularity.

Potential Benefits for Oniro

  • Expanded Compatibility: Run legacy x86 applications (e.g., games, enterprise software) on ARM-based Oniro devices.
  • Security: Hardware-enforced isolation via KVM and StratoVirt’s minimal device emulation for unmodified Linux desktop apps and games.
  • Performance: Optimized emulation through FEX or QEMU user-mode, with Vulkan passthrough for graphics acceleration for computers on x86 unmodified Windows desktop apps and games.
  • Cross-Ecosystem Synergy: Bridge Oniro with OpenHarmony, RISC-V, and other platforms, fostering collaboration across Eclipse Foundation projects alongside Huawei HarmonyOS ecosystem.

Next Steps

We’d love to:

  • Discuss this proposal in an upcoming Oniro WG meeting or technical call.
  • Contribute a proof-of-concept implementation (e.g., StratoVirt integration with Oniro’s build system).
  • Gather feedback from the community on priorities and technical alignment.

Resources

I am excited about the potential to enhance Oniro/OpenHarmony’s capabilities and would appreciate your thoughts on how to move forward. Please let us know if you’d like to schedule a discussion or if there’s a preferred channel for further exploration.

Thank you for your time and consideration. We look forward to your feedback!

Sincerely,
Benjamin Akhigbe
(on behalf of the CoreMobile team)
benjaminakhigbe@xxxxxxxxx


Back to the top