4 ms·

I'm not worried about what I'll put on my servers, but keeping the server hardware updated and secure. Mostly looking for answers from people that have had to

• bcantrill 2y ago
  Belated response here (and certainly not trying to talk you into Oxide!), but just for anyone who happens upon this, we do solve exactly the problem you describe. We have a true root-of-trust[0], a proper service processor in lieu of the larded-up BMC[1], an isolated management network[2] -- and we don't have a BIOS at all[3][4]. [0] https://oxide.computer/blog/exploiting-undocumented-hardware-blocks-in-the-lpc55s69 https://oxide.computer/blog/exploiting-undocumented-hardware... [1] https://oxide.computer/blog/hubris-and-humility https://oxide.computer/blog/hubris-and-humility [2] https://rfd.shared.oxide.computer/rfd/0250 https://rfd.shared.oxide.computer/rfd/0250 [3] https://rfd.shared.oxide.computer/rfd/0241 https://rfd.shared.oxide.computer/rfd/0241 [4] https://www.youtube.com/watch?v=cWDDx74s090 https://www.youtube.com/watch?v=cWDDx74s090
  • panick21_ 2y ago
    Are you gone do a Oxide and Friends on the root-of-trust?
    • bcantrill 2y ago
      Yes! We want to get a little further down the road on a few things with respect to plumbing the RoT through the stack -- but an episode on this is coming!
  • b112 2y ago
    You may have all of these things, but you seem to have a holistic platform, not bare metal servers. I just want servers. I want my own OS. I don't want some VM architecture between me and baremetal. Can I just install Linux directly on baremetal here?