baking one right now -- it is based on http://cdimage.ubuntu.com/ubuntu/releases/18.04.2/release/ub... but slightly modified (no root password, KVM setup, docker installed etc.)
will provide a link once I manage to upload it somewhere
140 karma · joined January 23, 2019
https://ananos.co.uk https://nofire.ai https://nubificus.co.uk
will provide a link once I manage to upload it somewhere
probably some kind of address mapping, but I'm no expert on this stuff ;-)
root@pi:~# cat /etc/issue.net
Ubuntu 18.04.2 LTS
root@pi:~# uname -a
Linux pi 4.19.57-v8+ #2 SMP PREEMPT Tue Jul 9 20:31:37 UTC 2019 aarch64 aarch64 aarch64 GNU/Linux
root@pi:~# file /bin/ls
/bin/ls: ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-, for GNU/Linux 3.7.0, BuildID[sha1]=de05fcef79d88af9cf9a71ed38e73af0b179bfb2, stripped
Other than that, the A72 handles VMEnters/VMExits by trapping in/out of EL0/EL1/EL2.
Regarding the GIC, first I think we should spend some time examining the benefits from the A72 upgrade. Then, breaking down the time spent on each step of the VM lifecycle should be fairly straightforward (annotate EL changes, capture numbers with perf or something similar).
Other than that, it's a decent workstation.
I think this paper presents an interesting overview of how to mitigate a subset of hw-related attack vectors. Seems really relevant.