Workload consolidation
The first x86 virtualization solution in a production cabin.
- Era
- 2019-2020
- Silicon
- Intel Apollolake · ACRN
- Market
- China
- Units
- 5M
Problem
No reference blueprint existed. Nobody had shown concurrent rendering across multiple isolated virtual machines at 60fps, and no automotive bootloader could bring up several operating systems on a single x86 SoC. The pieces existed separately. The proof that they could work together did not.
Constraint
Mixed criticality on shared silicon. The safety domain cannot be disturbed by Android infotainment, so freedom from interference had to hold under real load, not just on paper.
Approach
Prove it on two hypervisors, both on Intel x86. A QNX Hypervisor stack runs QNX RTOS on the safety domain and Android on infotainment. An ACRN stack adds a Linux Service VM to broker devices, with Zephyr OS on safety and Android on infotainment. Each brings up a safety RTOS and Android together from a purpose-built automotive bootloader, sharing one GPU so every display renders concurrently at 60fps rather than time-slicing.
Outcome
The first x86-based virtualization solution in automotive, and the reference that later programs were built against. The ACRN stack shipped across three vehicle programs at two Chinese OEMs: Chery Exeed LX in 2019, then Hongqi HS5 and HS7 in 2020.
Fig 3.1 · Two x86 hypervisor stacks on one SoC
- 2x86 hypervisor stacks
- 60fps concurrent, per display
- 3vehicle programs
- 5Mlifetime units