Conversation
Jarkko Sakkinen
jarkko
Edited 25 days ago
IMHO, AMD, Intel and ARM should step up and start provide some cheap and accessible hardware that you can use at your home, and not intended for rolling out cash (i.e. something like NUC), but only to allow kernel maintainers and operating system developers to test their server features.
Cheap means here something like less than 1000 euros.
E.g., in Intel SGX the latest and greatest are NUC7's from 2018 and for VM based confidential computing there's nothing appropriate.
Shame on you CPU companies!
#arm #intel #amd #cpu
Cheap means here something like less than 1000 euros.
E.g., in Intel SGX the latest and greatest are NUC7's from 2018 and for VM based confidential computing there's nothing appropriate.
Shame on you CPU companies!
#arm #intel #amd #cpu
4
0
2
@oleksandr Yeah, well I'm talking about what exists widely :-)
The solution that AMD and Intel provide is to subscribe to their developer programs and get "cloud access". Or something like this was proposed last time I asked about this.
One working alternative would be to provide full QEMU emulation support (which of course cannot do attestation but that does not matter for kernel).
The solution that AMD and Intel provide is to subscribe to their developer programs and get "cloud access". Or something like this was proposed last time I asked about this.
One working alternative would be to provide full QEMU emulation support (which of course cannot do attestation but that does not matter for kernel).
0
0
0
Marko Karppinen
karppinen@mastodon.online@jarkko I agree but if you actually need to pick an Intel SGX platform from what exists today, I’d look at mini-itx motherboards with Xeon-E. I’ve run the E-2388G in a SFF case with Noctua fans and it’s been whisper quiet and great.
1
0
1
@karppinen I still don't want to spend of my personal money as much as it costs so I review the patches by emulating SGX in my head while looking at Intel SDM :-) Testing is based only on compilation.
I do run final test on NUC7 tho but it does not really give sufficient information whether a feature is actually right.
I do run final test on NUC7 tho but it does not really give sufficient information whether a feature is actually right.
0
0
0
Jonathan McDowell
noodles@social.earth.li
@jarkko I'd like a solution that isn't so power hungry. Looks like you need EPYC for SEV-SNP, and minimum base TDP is 120W. I don't want one of those on my desk.
1
0
0
Jonathan McDowell
noodles@social.earth.li
@jarkko I generally don't mind remote machines, but it needs bare metal access and decent remote management, not just a VM or only SSH access to a host.
0
0
1