Skip to main content
The Changelog

Voices of Oxide (Interview)

76 min episode · 2 min read
·

Episode

76 min

Read time

2 min

AI-Generated Summary

Key Takeaways

  • Firmware Architecture: Oxide runs 64-70 instances of Hubris operating system across every rack component, from sub-50-cent microcontrollers to service processors. Each compute sled contains two copies minimum—one for service processing and one for root of trust security—because no single chip currently provides both required feature sets.
  • Update System Complexity: Self-service updates replace hundreds of software components across 32 sleds, 2 switches, and power controllers while maintaining system availability. The process takes approximately two hours and requires careful orchestration to avoid intermediate states where incompatible software versions communicate, using a plan-execute pattern for safety validation.
  • Rust Type Safety Benefits: The team uses Dropshot to generate OpenAPI specs from code and Progenitor to generate clients, ensuring API changes that break backwards compatibility fail at compile time rather than runtime. This approach catches incompatible enum variants and schema changes before deployment, eliminating entire classes of upgrade failures.
  • Uniform Compensation Model: Oxide pays all employees identical salaries regardless of role, with equity varying only by join date. This eliminates negotiation stress and prevents the $100,000 salary gaps common at companies like Google, where managers discover significant pay disparities among same-level team members after promotion cycles.
  • Design System Integration: The company uses a single UI design system across web console, marketing website, and physical hardware, maintaining consistent colors and elements. Industrial design decisions prioritize manufacturability at scale over prototype aesthetics, avoiding the common trap where mass production compromises initial design quality through cost-cutting measures.

What It Covers

Oxide Computer Company engineers discuss their custom server rack architecture, including Hubris operating system development, self-service update system challenges, and design philosophy. The team covers technical decisions around Rust, firmware development, and building hardware from first principles.

Key Questions Answered

  • Firmware Architecture: Oxide runs 64-70 instances of Hubris operating system across every rack component, from sub-50-cent microcontrollers to service processors. Each compute sled contains two copies minimum—one for service processing and one for root of trust security—because no single chip currently provides both required feature sets.
  • Update System Complexity: Self-service updates replace hundreds of software components across 32 sleds, 2 switches, and power controllers while maintaining system availability. The process takes approximately two hours and requires careful orchestration to avoid intermediate states where incompatible software versions communicate, using a plan-execute pattern for safety validation.
  • Rust Type Safety Benefits: The team uses Dropshot to generate OpenAPI specs from code and Progenitor to generate clients, ensuring API changes that break backwards compatibility fail at compile time rather than runtime. This approach catches incompatible enum variants and schema changes before deployment, eliminating entire classes of upgrade failures.
  • Uniform Compensation Model: Oxide pays all employees identical salaries regardless of role, with equity varying only by join date. This eliminates negotiation stress and prevents the $100,000 salary gaps common at companies like Google, where managers discover significant pay disparities among same-level team members after promotion cycles.
  • Design System Integration: The company uses a single UI design system across web console, marketing website, and physical hardware, maintaining consistent colors and elements. Industrial design decisions prioritize manufacturability at scale over prototype aesthetics, avoiding the common trap where mass production compromises initial design quality through cost-cutting measures.

Notable Moment

One engineer revealed they joined Oxide specifically because the company was not fully remote, accepting the position in February 2020. Within weeks, the pandemic forced complete remote work, creating an ironic situation where their primary reason for joining immediately disappeared yet they stayed for four years.

Know someone who'd find this useful?

You just read a 3-minute summary of a 73-minute episode.

Get The Changelog summarized like this every Monday — plus up to 2 more podcasts, free.

Pick Your Podcasts — Free

Keep Reading

More from The Changelog

We summarize every new episode. Want them in your inbox?

Similar Episodes

Related episodes from other podcasts

This podcast is featured in Best Cybersecurity Podcasts (2026) — ranked and reviewed with AI summaries.

You're clearly into The Changelog.

Every Monday, we deliver AI summaries of the latest episodes from The Changelog and 192+ other podcasts. Free for up to 3 shows.

Start My Monday Digest

No credit card · Unsubscribe anytime