3 ms·
Note that the first OMI controller from Microchip (nee Microsemi) will have fully open source firmware. This is huge coming from Microsemi/Microchip ... and lik
by justinjlynn 7y ago
Note that the first OMI controller from Microchip (nee Microsemi) will have fully open source firmware. This is huge coming from Microsemi/Microchip ... and likely a result of IBM strongarming them for it. Even with a complete shift in memory architecture, IBM have still managed to ensure that their ecosystem is fully open and auditable - beautiful.
Also, take a look at the Protected Execution Facility (aka Ultravisor) ... it permits systems owners to separate hypervisor administration and code from guest machines and shrinks the trusted code base to almost nothing. Also, fully open source. Intel and AMD have something kind of similar but it requires proprietary firmware and trusted key signing by the vendor while IBM's design doesn't require any proprietary firmware or trusted key signing by the vendor at all. Very very cool.
- wbl 7y agoUntil your guests start talking to one another. Then you might have isolation but it's at the wrong level.
- justinjlynn 7y agoIf your guests start talking to one another, then it still has to be permitted by the ultravisor or the network layer. Isolation is subjective and PEF/Ultravisor permit you to separate the administrators of the hypervisor from the administrators of the guest workloads. This is something you don't really get elsewhere with the same security guarantees and/or open implementation.