3 ms·
I wonder if openbsd is secure running as a guest ? it it able to isolate it-self sufficiently so that the host cannot mathematically breach it ? (which makes op
by 6r17 9mo ago
I wonder if openbsd is secure running as a guest ? it it able to isolate it-self sufficiently so that the host cannot mathematically breach it ? (which makes openbsd very suitable for keyholding)
- muricula 9mo agoThe host kernel and probably the host VMM can see guest memory, so I wouldn't use it for that.
- daneel_w 9mo agohttps://www.amd.com/en/developer/sev.html https://www.amd.com/en/developer/sev.html
- ikmckenz 9mo agoAs of 2025 OpenBSD has support for AMD SEV and SEV-ES, with support for SEV-SNP work-in-progress, so with the right hardware yes it's able to isolate itself sufficiently https://www.bsdcan.org/2025/timetable/timetable-Confidential-Computing-with.html https://www.bsdcan.org/2025/timetable/timetable-Confidential...