Bheem OS - A Next-Gen Reasonably Secure OS

Explore the next-generation reasonably secure operating system, Bheem OS, in this comprehensive conference talk. Delve into the innovative approach of virtualizing applications and OS functions into Rust MicroVMs, offering enhanced security through isolation while maintaining usability and performance. Learn about the secure management of subsystems, including display, networking, filesystem, and input devices. Discover the concept of isolated user workspaces and profiles, eliminating the need for multiple computers. Understand how Bheem OS improves upon Qubes OS with better UI/UX, graphics performance, and seamless profile switching. Gain insights into running Android, Linux, Windows, and Mac apps within one OS, and explore the potential for a dedicated gaming workspace. Follow along as the speakers discuss performance, app containerization, hardware containers, cross-platform support, immutable filesystems, declarative permissions, remote rendering, enterprise features, and the broader Openw3b ecosystem.

Introduction
Disclaimer
Performance
Dockerfile for apps
Dockerfile to disk image
Start the VM QEMU
Inbuilt sandbox
xlldocker & crostini
Hardware Containers
Key differences
One app per VM
Cross-Platform support
Immutable filesystem
Declarative permissions
Workspaces
Remote rendering
Admin vs User
Enterprise lockdowns
Seamless updates
Powerful monitoring
Openw3b Ecosystem
Masterplan