I just released go-boot v1.3, it brings EFI variable display and pagination support. github.com/usbarmory/go...

GopherCon 2025: Graphical Apps without an OS - Andy Williams Recording is now live and it features TamaGo! youtu.be/usUz3XyiR3I?...

I'm running a TamaGo VM on Google Compute Engine. No CVEs to worry about other than Go ones, just own code and runtime, starts and reboots instantly. Open with no-auth SSH. As a cybersecurity professional this would be unthinkable, but TamaGo brings tattack surface close to 0.

GopherCon 2025: An Operating System in Go - Patricio Whittingslow Recording is now live and it features TamaGo! youtu.be/SvsdVe1kgSU?...

Oh wow, someone made an AUR for go-boot 🤩 aur.archlinux.org/packages/go-...

TamaGo support for Google Cloud Compute is maturing, networking is now sorted!

Following Go 1.25.5, tamago-go and tamago 1.25.5 are released! This release brings in ARM64 and NXP i.MX8MP support, extending our official support to a brand new architecture. More tamago/arm64 targets are being developed! github.com/usbarmory/ta... github.com/usbarmory/ta...

I am so glad I managed to acquire one of these!

The moment when you squash that bug which you felt you had years ago, but never reappeared, which definitely came back biting hard years later…

TamaGo on arm64 is progressing fast, we now have interrupt handling. I also got a hold on the new @arduino UNO Q. Would you like to see TamaGo running on it?

U.S. Graphics Company • Berkeley Mono Letterpress • Fedrigoni Matrica Gesso 360 • Black U 8 x 4.5 mm

Our talk at this year Transparency.dev summit is now live! Implementing transparency in UEFI boot managers www.youtube.com/watch?v=Srv2... Check out the project: github.com/usbarmory/bo...

tamago/arm64 support is progressing fast, i.MX8MP under qemu now with full networking!

The recording of my talk at OSFC 2025 earlier this year is now live at: www.osfc.io/2025/talks/t...

And TamaGo lives on an ARM64 SoC (emulated for now)! Looking forward to merge this, aarch64 is an important ecosystem for us to support.

This Fil-C doc is a master class on C memory (un)safety, while explaining Fil-C properties in thwarting them. I just love when documentation explains a topic so well that its side effect is becoming a reference to the underlying premise of it. fil-c.org/invisicaps_b...

20 years ago we incorporated Inverse Path. After so many years, despite an acquisition and many ownership changes, the team still continues to deliver offensive and defensive security, engineering and research with the same original spirit. I feel so privileged. What a ride.

I am switching to ASCII art for CV/portfolio depiction. It's so relaxing and rewarding going in this direction. andrea.bio

“Implementing a Persistent Key-Value Store in a Tamper-Resistant Device for SGX Enclave Applications” Nice research which used our USB armory and TamaGo for its implementation! dl.acm.org/doi/abs/10.1...

Today, my job as a cryptography engineer involved ASCII art and the Star Wars wiki. github.com/cfrg/draft-i...

I just released go-boot v1.1 which brings in the now mature EFI Simple Network support. Compile with NET=1 DEBUG=1 and you can use go `trace`, `pprof` or even statsviz visualization against a pure Go UEFI application! github.com/usbarmory/go...

Following go1.25.2, I've just released tamago-go1.25.2 and tamago v1.25.2. This release comes to you directly from Google HQ in Sunnyvale, as I attend the OSFC and UEFI Developer conferences! github.com/usbarmory/ta... github.com/usbarmory/ta...

First ever boot of a TamaGo unikernel in the cloud, here on Google Cloud Compute Engine, automatically deployed from remote userspace! Looking forward to polish and publish this.

Thanks to TamaGo it took me less than 5 minutes to integrate Gemini AI in my UEFI bootloader. Is this the first ever AI capable boot manager? Probably? Shall I feel guilty? Most definitely! I cannot underestimate how enabling TamaGo is.

Pro tip: the most important tool to help, or give hell to, developers of safe IRQ handling on SMP systems is `ping -f`.

I am SSH'ing in my gaming PC bootloader to start Windows remotely. I am so grateful to the gVisor team for allowing me to put their pure Go TCP/IP stack on the bare metal. All of this is now in go-boot@development and will be part of v1.1: github.com/usbarmory/go...

"Timing Side-Channel Attacks on USB Devices Using eBPF" What a cool spin on Armory/GoKey/Tamago, used as experimental testbed in this paper. secloud.ing.unimore.it/shared/paper...

Screw PXE, this means the entire Go TLS and networking stack is available under UEFI. In seconds I added DHCP and an SSH server to remotely manage my pre-boot environments. I see much potential.

Adding networking to go-boot through UEFI Simple Network Protocol. It took 77 LOCs of pure Go to add the UEFI driver and bridge it to gVisor stack.

I am so humbled by the two @gophercon.com talks which touched TamaGo this year! Andrew Williams is porting Fyne to TamaGo, which means bare metal GUI in UEFI with go-boot! Patricio Whittingslow talked about our upstreaming proposal and its generic “noos” API. ❤️ Shall I submit next year?

Work on porting TamaGo to ARM64 has begun! The Go runtime changes are complete and original distribution tests are passing. github.com/usbarmory/ta...

Today I have a more serious topic than usual, please consider reposting for reach: My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/4]

TamaGo 1.25.0 has been released! Quite a smooth merge to bring in all the Go 1.25.0 major release goodies. github.com/usbarmory/ta... github.com/usbarmory/ta...

TamaGo 1.24.6 has been released with SMP support! Given the number of supported platforms and architectures this also marks the beginning of release notes for both tamago-go and tamago repositories. github.com/usbarmory/ta... github.com/usbarmory/ta...

I am delighted to say that TamaGo SMP support is now mature for Firecracker/QEMU microVMs! The changes are tracked in the following PR and will be merged in tamago1.24.6 when go1.24.6 is released. github.com/usbarmory/ta...

Testing tamago/amd64 upcoming SMP support.

With a single statement, Go now allows FIPS 140-3 mode. This effortlessly aids compliance in bare metal TamaGo applications, whether used as bootloaders, TEEs or application unikernels. go.dev/doc/security...

There is now a first working SMP implementation for tamago/amd64. It surprisingly results in LOC reduction in tamago-go as more existing code is re-used. There'ss still work to be done, but here's tamago-example spreading its test goroutines across different CPUs (red vs green)

My TamaGo SMP support effort can be followed in this PR. Additional cores bootstrap is now fully polished. Next up: handing goroutines to the awaken extra cores! It feel crazy awesome to send Inter-Processor Interrupts in pure Go but hey...life choices. github.com/usbarmory/ta...

TamaGo SMP support for x86_64 is progressing. I just bootstrapped an SMP secondary core (AP) within TamaGo! It involved starting the CPU and switching from real-mode to long-mode directly. All of this in Go assembly which, with some caveats, amazingly be used in 16-bit mode.

PSA: Linux kernel 6.15 drops a CRC-32 value which simply breaks bootloaders that uses it (e.g. linuxboot, u-root). github.com/u-root/u-roo... www.phoronix.com/news/Linux-6...