Marly Salazar

Staff Software Engineer

LinkedIn logo
Passing a TPU Through to a Paravirtualized Guest A customer asked us to run Google TPUs inside our zones. The obvious way to hand a guest a piece of PCI hardware is IOMMU-backed passthrough, and Xen has supported that for HVM guests for years. Our zones default to PV, without hardware virtualization extensions or a VT-x or AMD-V dependency. That is a big part of why they boot and fork as fast as they do. Moving these workloads to a different guest model would have meant giving up properties we deliberately built the runtime around, so the interesting problem was making passthrough work without changing the execution model. Xen's PV mode had never had an IOMMU story for a domU. Every DMA a PV guest issues goes out under dom0's address space, because PV was designed before device passthrough to an unprivileged domain was something anyone needed from it. The TPU work ended up being three problems stacked on top of each other. We had to give Xen an IOMMU interface a PV guest could actually

October 27, 2026

Passing a TPU Through to a Paravirtualized Guest

Read more
It's Beginning to Look a Lot Like CVE Season: PHP2Shell and Beyond

October 23, 2026

It's Beginning to Look a Lot Like CVE Season: PHP2Shell and Beyond

Read more
The Futility of Threat Modeling AI Agents

October 22, 2026

The Futility of Threat Modeling AI Agents

Read more

CVE-2026-24834: When Trusting The Guest Goes Wrong

February 20, 2026

Read it Now

New Functionality Comes to Edera’s Open Source Sandboxing Tool Styrolite

February 14, 2026

Read it Now

YOLO Mode For AI Agents Without the YOLO: Running Claude Code with Kernel Isolation

February 10, 2026

Read it Now

2 Years Building “The Sandbox” Everyone Suddenly Needs For AI

February 9, 2026

Read it Now

When Attackers Blend In: Why Visibility Isn’t Containment

February 2, 2026

Read it Now

Kata vs Firecracker vs gVisor: Isolation Compared

January 30, 2026

Read it Now

Your Monitoring Stack Just Became a RCE Vector: A Deep-Dive into the Kubernetes nodes/proxy RCE

January 26, 2026

Read it Now