Trenchboot Secure Launch Support For Linux Sees New Patches For a while now Oracle engineers and others have been working on Trenchboot as a means of secure launch/boot support when paired with the likes of Intel TXT and AMD SKINIT for trusted execution and configuring each piece of the software boot chain for trusted/secure handling. The latest kernel patches have been sent out for review for secure launching of the kernel...
GraalPHP Is A PHP JIT Implementation Built On GraalVM Oracle's GraalVM has seen language support well outside of Java/OpenJDK from Ruby to WebAssembly to R and Python. The newest language seeing an experimental implementation built atop GraalVM is PHP...
Fedora 33 Beta To Be Released Next Week After missing the preferred target date of 15 September and the secondary beta target date of this week, Fedora 33 Beta is now on track to ship next week...
AMD Ryzen 9 3900XT CPUFreq Governor Comparison With Linux 5.9 One of the most frequent questions received at Phoronix in recent times is whether the "schedutil" governor is ready for widespread use and if it can compare in performance to, well, the "performance" governor on AMD Linux systems. Here are some benchmarks of an AMD Ryzen 9 3900XT using the latest Linux 5.9 development kernel in looking at the performance differences between the CPUFreq governor options of Ondemand, Powersave, Performance, and Schedutil.
Arm Begins Bringing Up Neoverse N2, Neoverse V1 Support In The GNU Toolchain It was just a few days ago that Arm outlined the Neoverse N2 "Perseus" design as a follow-on to the Neoverse N1 and coming concurrently to the next-generation Cortex-A. Now the company has already jumped on beginning their open-source/Linux enablement work around the Neoverse N2...
Intel Engineers Begin Landing Open-Source Support For TDX, Intel Key Locker Last month Intel published a whitepaper on TDX as Trust Domain Extensions as a means of better securing virtual machines. TDX allows for isolating VMs from the hypervisor and other non-VMM system software. Intel TDX builds off other recent work around MKTME memory encryption and other features. We are now beginning to see that software side support roll-out along with the also-new Key Locker instructions...
Fedora 34 Aims To Further Enhance Security But Will Lose Runtime Disabling Of SELinux Currently on Fedora the Security Enhanced Linux (SELinux) functionality that's there by default can be disabled at run-time via the /etc/selinux/config but moving forward with Fedora 34 they are looking at removing that support and focusing just on disabling via selinux=0 at the kernel boot time in order to provide greater security...