Generic System for Safe Rootfs and Kernel Upgrades Without Single-Point of Failure
Explore a robust system for safe rootfs and kernel upgrades, minimizing failure risks through kexec/initramfs, crypto verification, and intelligent retry mechanisms. Learn about streamlined factory flashing and kernel management.
Persisting Guest Memory and Kernel/Device State Safely with pkernfs
Exploring pkernfs: A new file system for hypervisor live updates with device assignment. Discusses memory management challenges, security improvements, and solutions for preserving VM state during updates.
Intel Trusted Domain Extensions (TDX) Host Kernel Support
Explore Intel's TDX Host Kernel Support: module initialization, memory management, and interactions with CPU/memory hotplug and kexec(). Learn about protecting guest VMs from malicious hosts and physical attacks.
Abusing Linux as a Trusted Bootloader
Explore Petitboot, a Linux-based bootloader for OpenPOWER firmware, and learn how it can be transformed into a trusted boot system using the linux-integrity subsystem and minimal kernel modifications.
Bootstrapping Systems With Open Source Firmware
Explore open-source firmware for enhanced physical security and data protection. Learn about Heads, a custom firmware and OS configuration that combines hardware hardening with secure boot processes.
Petitboot - Linux in the Bootloader
Explore Petitboot, a Linux-based bootloader for OpenPOWER systems. Learn its components, usage, advantages, and future prospects in server applications and beyond.
Consolidating Representations of the Physical Memory
Explore physical memory representations in Linux, covering memory maps, hotplug, and KExec. Learn about challenges and future developments in memory management.
Persisting IOMMU Domains Across Kexec - Live Update
Explore techniques for maintaining IOMMU domain persistence during kexec live updates, enhancing system stability and performance in Linux environments.
Live Updates for KVM Hosts: Minimizing Downtime in Cloud Computing
Explore live updates for KVM hosts, enabling kernel and userland updates with minimal downtime. Learn about challenges and benefits for cloud providers using this powerful QEMU feature.
ACPI Fast Handover for Kexec Live-Update
Explore ACPI fast handover techniques for kexec live-update, enhancing system efficiency and minimizing downtime during kernel updates.