Workload consolidation
The first x86 virtualization solution on an open-source hypervisor in a production cabin.
- Era
- 2016-2019 · Blueprint 2020-2023
- Silicon
- Intel Apollo Lake · ACRN
- Market
- China
- Units
- 5M+Employer-reportedApollo Lake cockpit programs, 2017-2020
Problem
No reference blueprint existed. Nobody had shown concurrent rendering across multiple isolated virtual machines at 60fps, and no automotive bootloader could bring up several operating systems on a single x86 SoC. The pieces existed separately. The proof that they could work together did not.
Constraint
Mixed criticality on shared silicon. The safety domain cannot be disturbed by Android infotainment, so freedom from interference had to hold under real load, not just on paper.
Approach
Prove it on two hypervisors, both on Intel x86. A QNX Hypervisor stack runs QNX RTOS on the safety domain and Android on infotainment. An ACRN stack adds a Linux Service VM to broker devices, with Zephyr OS on safety and Android on infotainment. Each brings up a safety RTOS and Android together from a purpose-built automotive bootloader, sharing one GPU so every display renders concurrently at 60fps rather than time-slicing.
What I personally did
I built the production cockpit consolidation reference architecture on ACRN. The direction that the cockpit should consolidate onto one safely partitioned SoC originated with me at Intel in 2016, and I carried it from that proposal to the first production vehicle in October 2019.
Outcome
The first x86-based virtualization solution on an open-source hypervisor in automotive. It was taken up, unasked, by Chery and Neusoft (EXEED-LX, October 2019) and by Automotive Grade Linux and its eighteen member companies. The ACRN stack shipped across three vehicle programs at two Chinese OEMs: Chery Exeed LX in October 2019, then Hongqi HS5 and HS7 in 2020. Across the Apollo Lake cockpit programs of 2017 to 2020 as a whole, the employer reports more than five million cockpit units. The Workload Consolidation Blueprint that followed, 2020 to 2023, was adopted independently by TTTech Nerve Blue in 2020 and ADLINK ROScube-I in 2021.
Fig 3.1 · Two x86 hypervisor stacks on one SoC
- 2x86 hypervisor stacksDocumented
- 60fps concurrent, per displayDocumented
- 3vehicle programsDocumented
- 5M+Apollo Lake cockpit units, 2017-2020Employer-reported