The Edge Virtualization Engine (EVE) combines a type-1 hypervisor (currently Xen) with a hardened root-of-trust operating system that provides a runtime for edge containers. It is specifically designed to run in IoT and edge devices. EVE provides system architects with new levels of control through virtualization of these edge devices. Since this edge equipment is deployed outside datacenters, EVE securely isolates functions in the virtualization layer to prevent a single functional block from compromising the entire system (similar to the concepts first developed in Qubes OS). EVE virtualizes all resources on a device and allows for granular remote management. It can host multiple applications running in edge containers. It provides high security default settings, and enables remote patching, updates, and application deployment, and much more. EVE's APIs control assignment of device resources to different workloads allowing more efficient use of resources. System architects can increase device utilization through workload consolidation and application multi-tenancy.
Using EVE as the basis of a fleet of IoT devices, it's possible for operators to efficiently manage far larger numbers of deployments, spread across wider geographies, while running many applications. Developers can deploy modern cloud-native apps co-located with existing legacy applications running on any operating system.
EVE consists of four major components:
EVE includes a type-1 hypervisor based on Xen, allowing it to run on any supported hardware platform.
These services provide the ability for EVE and its hosted apps to self update, identity management, security, and networking services for all the device resources and instances.
This includes the device network interface, drivers for ethernet and wireless networking, and an API for connecting EVE to centralized management services.
This includes domain management, instance orchestration, virtualized IO, inter instance networking, and remote instance consoles.
Instructions how to use are available here.