I am SSH'ing in my gaming PC bootloader to start Windows remotely. I am so grateful to the gVisor team for allowing me to put their pure Go TCP/IP stack on the bare metal. All of this is now in go-boot@development and will be part of v1.1: github.com/usbarmory/go...

"Timing Side-Channel Attacks on USB Devices Using eBPF" What a cool spin on Armory/GoKey/Tamago, used as experimental testbed in this paper. secloud.ing.unimore.it/shared/paper...

Screw PXE, this means the entire Go TLS and networking stack is available under UEFI. In seconds I added DHCP and an SSH server to remotely manage my pre-boot environments. I see much potential.

Adding networking to go-boot through UEFI Simple Network Protocol. It took 77 LOCs of pure Go to add the UEFI driver and bridge it to gVisor stack.

I am so humbled by the two @gophercon.com talks which touched TamaGo this year! Andrew Williams is porting Fyne to TamaGo, which means bare metal GUI in UEFI with go-boot! Patricio Whittingslow talked about our upstreaming proposal and its generic “noos” API. ❤️ Shall I submit next year?

Work on porting TamaGo to ARM64 has begun! The Go runtime changes are complete and original distribution tests are passing. github.com/usbarmory/ta...

Today I have a more serious topic than usual, please consider reposting for reach: My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/4]

TamaGo 1.25.0 has been released! Quite a smooth merge to bring in all the Go 1.25.0 major release goodies. github.com/usbarmory/ta... github.com/usbarmory/ta...

TamaGo 1.24.6 has been released with SMP support! Given the number of supported platforms and architectures this also marks the beginning of release notes for both tamago-go and tamago repositories. github.com/usbarmory/ta... github.com/usbarmory/ta...

I am delighted to say that TamaGo SMP support is now mature for Firecracker/QEMU microVMs! The changes are tracked in the following PR and will be merged in tamago1.24.6 when go1.24.6 is released. github.com/usbarmory/ta...

Testing tamago/amd64 upcoming SMP support.

With a single statement, Go now allows FIPS 140-3 mode. This effortlessly aids compliance in bare metal TamaGo applications, whether used as bootloaders, TEEs or application unikernels. go.dev/doc/security...

There is now a first working SMP implementation for tamago/amd64. It surprisingly results in LOC reduction in tamago-go as more existing code is re-used. There'ss still work to be done, but here's tamago-example spreading its test goroutines across different CPUs (red vs green)

My TamaGo SMP support effort can be followed in this PR. Additional cores bootstrap is now fully polished. Next up: handing goroutines to the awaken extra cores! It feel crazy awesome to send Inter-Processor Interrupts in pure Go but hey...life choices. github.com/usbarmory/ta...

TamaGo SMP support for x86_64 is progressing. I just bootstrapped an SMP secondary core (AP) within TamaGo! It involved starting the CPU and switching from real-mode to long-mode directly. All of this in Go assembly which, with some caveats, amazingly be used in 16-bit mode.

PSA: Linux kernel 6.15 drops a CRC-32 value which simply breaks bootloaders that uses it (e.g. linuxboot, u-root). github.com/u-root/u-roo... www.phoronix.com/news/Linux-6...

Preview at raw.githubusercontent.com/wiki/usbarmo...

Working on a new datasheet style, what do you think?

PCB art is the best kind of art. Special business USB armory customers can be gifted with the System-on-Chip unique identifiers fusemap engraved as a token of appreciation. The fusemap is created with our own github.com/usbarmory/cr...

What a quick getaway…

We need a "slow computing" movement, the digital equivalent of "slow food". We need to code better, with human care and attention to details, with true understanding of technology, achieving better performance with fewer resources. We can do more with less if we believe in it.

I just released go-boot v0.4 adding `lspci` command and Blt API for displaying arbitrary graphics on the frame buffer. The default heap size is reduced and increased opportunistically based on memory map. github.com/usbarmory/go...

My command line data analysis tool is at a point where I'm ready to share it! `freq` is a tool I wrote in Rust, intended to replace pipelines of `grep`, `sed`, `awk`, `sort`, `uniq -c`, and `sort -rn` to look at distributions of values in datasets. I use it daily. rya.nc/gh/freq

Let us try this again: github.com/golang/go/is...

Vodafone partially fixed this. Now the CC is blanked and just the expiry is shown. The email has only post 1st letter user part blanked, the domain remains. Suboptimal, but better.

@nanovms.bsky.social ops is pretty great, I wish however I could use it to bypass their stack to directly deploy TamaGo ELF on the cloud. I cannot find any cloud provider that would simply take an ELF for PVH booting without going through complex wrapping. Is there any?

Shall I add Xen support to TamaGo and integrate Go unikernel compartmentalization under @qubes-os.org.web.brid.gy ?

I implemented MSI-X interrupts (in Go of course) and lived to tell the tale. TamaGo support for Cloud Hypervisor is now complete!

Cloud Hypervisor doesn't want to do things the easy (a.k.a. legacy) way, therefore I had to learn PCI and implement a VirtIO over PCI driver 😅. But it works like a charm and I can SSH to TamaGo under Cloud Hypervisor! Next up MSI-X interrupts. github.com/usbarmory/ta...

After QEMU microvm, Firecracker and UEFI, TamaGo will soon be available for Cloud Hypervisor!

go-boot v0.3 adds pretty colors and is now capable of chain loading arbitrary EFI images, including the Windows UEFI bootloader. github.com/usbarmory/go...

go-boot is currently 2k LOCs, and sized 3MB, it’s as fast, if not faster than grub or systemd for equivalent operations. We used pure Go for boot loaders, TEEs, and complex firmware on AMD64 KVM, ARM boards and RISC-V targets. Is it time for a third upstraming attempt?

I just released go-boot v0.1! A TamaGo unikernel implementing a UEFI Shell and OS loader allowing secure, powerful, yet easy UEFI API interaction. 100% unencumbered Go in your pre-boot environment. github.com/usbarmory/go...

Fun fact: if you enter the BIOS menu before booting your OS you will end up with slightly less available memory. (Also the resulting memory map will awfully fragmented and a clever boot loader will need to defrag it to find the right memory pages for allocating kernel space).

I am wrapping UEFI Simple File System around Go pkg.go.dev/io/fs and it works great. I can now load a Linux kernel directly from the EFI partition and boot it! Incidentally having the full Go runtime at this layer could result in the best UEFI malware framework ever 😅

Writing these words from the first Linux kernel ever booted on x86_64 by a pure Go UEFI bootloader! Pro debugging technique: listening to CPU noises to attest boot flow progress while Frame Buffer issues made everything dark 😅.

There are still some missing boot structures to fill, bot overall now go-boot can find and allocate memory for relocating a complex Linux kernel, RAM disk and switch to it. Here shown the latest Arch Linux kernel and ram disk booted by a pure Go UEFI boot manager.

introducing tangled: a git collaboration platform built on #atproto blog.tangled.sh/intro

A little fix on CPU clock detection and now go-boot runs on a Dell as well. Second entry in the Hardware Compatibility List: github.com/usbarmory/go...