2 ms·
Recent Pixel devices support Android pKVM nested virtualization, with optional 2-way isolation, https://android-developers.googleblog.com/2023/12/virtual-machin
by walterbell 2y ago
Recent Pixel devices support Android pKVM nested virtualization, with optional 2-way isolation, https://android-developers.googleblog.com/2023/12/virtual-machines-as-core-android-primitive.html https://android-developers.googleblog.com/2023/12/virtual-ma...
Even if Android is compromised all the way up to (and including) the host kernel, the isolated VM remains uncompromised
This allows virtualized Linux VMs on supported Pixels, running alongside Android, https://www.xda-developers.com/nestbox-hands-on/ https://www.xda-developers.com/nestbox-hands-on/ & https://www.esper.io/blog/android-dessert-bites-13-virtualization-on-pixel-6-379185 https://www.esper.io/blog/android-dessert-bites-13-virtualiz...
- diffeomorphism 2y agoWhen will that come to non-Pixel devices?
- walterbell 2y agoPossibly when Qualcomm brings Oryon (with silicon support for nested virtualization) from laptops to smartphones in late 2024, https://www.androidauthority.com/qualcomm-snapdragon-oryon-cpu-2024-3378729/ https://www.androidauthority.com/qualcomm-snapdragon-oryon-c... & https://www.qualcomm.com/developer/blog/2024/01/gunyah-hypervisor-software-supporting-protected-vms-android-virtualization-framework https://www.qualcomm.com/developer/blog/2024/01/gunyah-hyper... > we have replaced pKVM with Gunyah Hypervisor Software – our own, more versatile hypervisor – on our Qualcomm Technologies’ chipsets. With Gunyah, we can use one hypervisor across use cases as varied as automotive, mobile broadband, IoT and wearables. We’ve upstreamed Gunyah for general use by the Android community.