I started working on MOROS[1][2] after completing the tutorial 5 years ago, and ...

anta40 · 2024-09-15T02:14:35 1726366475

Whoa, looks very cool. So far, my favourite project is xv6, because:

- codebase is reasonably compact, can be understood in a few weeks

- can be built with standard GCC provided by package manager, no need to built a custom GCC from source

- has user space, too

Seems like your project also have those points checked. Bookmarked!

vinc · 2024-09-15T06:52:24 1726383144

Thanks! Compared to xv6, you will find some important pieces missing. For example, there's no multiprocessor support and no scheduler, only one process can run at any time.

I should also note that user space programs can do memory allocation via syscall, but I currently have an issue with the kernel memory that I probably need to remap higher in memory. So, most commands inside the OS are still executed from kernel space, although they use syscalls and everything as if they were user space programs. I'm having a lot of fun creating device files inspired by Plan9 to communicate with the kernel.

There's a lot of work yet to arrive at something that feels truly complete as an educational OS, but I'm hoping to get there eventually. I really like this project because I'm learning along the way all the time!

Your first point is one of my main goals: I want the whole OS, including user space programs, to fit inside one brain. I'm always trying to find ways to keep complexity low without compromising too much on performance.

codethief · 2024-09-14T20:34:52 1726346092

Re [1]: No TLS? :(

vinc · 2024-09-14T21:06:32 1726347992

Good question, there's no TLS support inside MOROS so its website must be available over HTTP, especially when I self-host it. That's not the case currently so I could also have HTTPS but I'm using Dokku and last time I tried the Let's Encrypt plugin would redirect HTTP to HTTPS automatically, which is annoying.

Edit: I set up CloudFlare in front of the server and there's now a working HTTPS version along with the HTTP version accessible from inside MOROS. This should also work when I'll use again the web server inside the OS. Thanks for prompting me to look into it!

bigstrat2003 · 2024-09-14T21:55:32 1726350932

There's nothing sensitive, therefore there is no reason to use TLS.

appendix-rock · 2024-09-15T00:07:33 1726358853

No! Stop! Why won’t this one die! MITMing is a two way street. I could intercept sensitive data, or I could shove something in that tricks the user (phishing, etc), exploits the user agent, and more!.

“You only need encryption for the sensitive stuff” is what we did, poorly, in the late ‘00s / early ‘10s, and it was rightfully proven to be a bad idea. There’s a reason why browsers treat HTTP the way they currently do, and it isn’t because they’ve been co-opted by Big Certificate Authority.

EDIT: and as the other commenter says, there are download links.

tcfhgj · 2024-09-15T01:21:11 1726363271

You don't need encryption to prevent something shoved into it without detection

aaronmdjones · 2024-09-15T06:09:21 1726380561

No, but you do need authentication, and TLS does both.

XorNot · 2024-09-15T03:37:22 1726371442

No but we have no "httpv" protocol scheme to require signatures but not encryption

Which IMO has been a huge mistake since breaking caching proxies for networks because we want to prove authenticity and have to do secrecy as well has been quite silly.

0xFF0123 · 2024-09-14T23:53:37 1726358017

Other than the build and download links?

flatfuzz · 2024-09-14T20:10:43 1726344643

im subscribed to your RSS feed since a while back, MOROS seems like a really cool project! sadly haven’t been able to try it since it wouldn’t start on QEMU for some reason, though i think that’s an issue on my side rather than the OS itself.

vinc · 2024-09-15T07:01:14 1726383674

Thanks! If you try again and still have it don't hesitate to create an issue on GitHub and I'll look into it!