@npmccallum so if I were to boot a full VM in SEV, would the memory be encrypted/decrypted at the level of the VM? Is this something which is already supported by cloud providers?
Nathaniel McCallum
@npmccallum
@jmstoller_gitlab Yes. No.
Jon Stoller
@jmstoller_gitlab
@npmccallum so you would have to purchase a computer and set it up yourself? Is Red Hat close to releasing an online VM that will support this?
Nathaniel McCallum
@npmccallum
@jmstoller_gitlab Today you can get SEV-enabled hardware from various clouds. But Enarx has the only SEV-attestation code in the world (to my knowledge). This is required to turn on encryption. The Virtualization stacks are currently looking at implementing this, but nobody supports it yet.
So the problem is fundamentally a software problem.
Enarx is likely to be first to market, because even if the VM hypervisor supports turning on SEV and attesting it, you can't yet pass keys through the guest BIOS, EFI, bootloader and kernel.
The required support is roughly:
Hardware
Host Kernel
Host VMM (hypervisor)
Guest BIOS
Guest EFI
Guest Bootloader
Guest Kernel
Cloud Management Software
Tenant Deployment Software
Jon Stoller
@jmstoller_gitlab
Ok, thanks for the explanation @npmccallum!
Nathaniel McCallum
@npmccallum
Today we have (1) and (2). Enarx has working but not yet merged (3) and (7) [in Enarx architecture, 4-6 aren't needed]. We also plan to build (8) and (9).
@MikeCamel We should have a slide summarizing ^^^
Edwin Beasant
@ebeasant-arm
Here's something you might be interested in: Cranelift/Wasmtime now up on aarch64 (some tests still WIP): bytecodealliance/wasmtime#1494
That removes a significant blocker for Enarx on aarch64 :-)
Edwin Beasant
@ebeasant-arm
In addition, Redox's aarch64 port has been updated by Robin R over here, which means there's a minimally booting aarch64 kernel. There's also work on the recursive paging approach used here (Robin would like to use linear paging if possible)
Nathaniel McCallum
@npmccallum
@ebeasant-arm wohoo!
Connor Kuehl
@connorkuehl
Almost to 100 stars on the repo!
Lily Sturmann
@lkatalin
:tada: :smile:
Nathaniel McCallum
@npmccallum
@connorkuehl We crossed 50 stars only a few weeks ago!
Mike Bursell
@MikeCamel
Yay!
matrixbot
@matrixbot
kpouget on Freenode \join #enarx
kpouget on Freenode Hello, I'd like to join the Enarx call tomorrow, is 14:00-14:30 GMT the correct time?
Connor Kuehl
@connorkuehl
Hi kpouget! Yes, that's correct
matrixbot
@matrixbot
kpouget on Freenode Connor Kuehl (Gitter), thanks, with the "EST" indication I wasn't sure !
_
Mike Dombrowski
@m-dombrowski
Hello folks! I discovered the Enarx presentation series at the Red Hat Summit and the project has piqued my interest. I'm interested in the possibility of contributing to the docs. I'm be glad to further explore the possibility with the group whenever someone is available.
Lily Sturmann
@lkatalin
Welcome @m-dombrowski, we're very happy to have your contributions.
Mark Bestavros
@mbestavros
Hello @m-dombrowski -- that's awesome! We'd love your contributions. First place I'd point you to is our wiki: https://github.com/enarx/enarx/wiki
Lily Sturmann
@lkatalin
I think @axelsimon will be a good person to chat with when he's back tomorrow (it's late in his time zone)
I'll also invite you to join our daily standups, which are open to the public and a great way to meet members of the team. Tomorrow at 10AM EST (14:00 GMT), the link is on our wiki
Mike Dombrowski
@m-dombrowski
Thanks for the greetings and invites. I'll continue to read up on the wiki per your links. I'll probably not make the meeting tomorrow at the scheduled time but will make an effort to do so in the future.
Lily Sturmann
@lkatalin
Thanks, @m-dombrowski. The meetings are short and happen at the same time each weekday, if that helps. You're also welcome to continue chatting here.
Nathaniel McCallum
@npmccallum
@m-dombrowski Glad to have you here! Hook up with @axelsimon. I'm sure he can get you started.
i was muted, so it didn't go through at the end of the meeting, but just wanted to say congratulations to everyone for what was achieved this week, with summit and all :)
Nathaniel McCallum
@npmccallum
Indeed. Thanks to everyone!
Mike Dombrowski
@m-dombrowski
Thanks for including me in the meeting. It was refreshingly efficient and I appreciate it moving along with a sense of purpose.
Nathaniel McCallum
@npmccallum
@m-dombrowski Glad to have you there!
Nathaniel McCallum
@npmccallum
@connorkuehl I took a pass at cargo make. I like where this is headed!