Hi Mikko,

You are correct, resources cannot be shared between VMs in the logical partition scenario. It sounds from the brief description of your use-case that you do not need hard realtime or Functional Safety certification, is that correct?

One thing that may be possible, but I don’t know if anyone has tried it yet is to run Android in a Docker container directly in the Service VM. See this page for more info on how to run Android in a Docker container: https://01.org/projectceladon/documentation/getting-started/on-container

Would that help you keep the surface attack of your system reasonably contained?

Thanks,

Geoffroy

  Hi,

  I’m pretty sure it is not possible but just in case I have missed something crucial, is it possible to use GFX sharing (for example with GVT-g) in logical partition scenario? The usage scenario we are investigating is such that it would have Android running on one user VM and Windows on another, both would need at least reasonable GFX performance, and it would be beneficial to not have a service VM to decrease security scope.

Best regards,

Mikko Kovanen

Senior Specialist, SW

Mobile: +358 40 779 7528

www.aavamobile.com

Aava Mobile Oy

Nahkatehtaankatu 2  |   90130 Oulu, Finland