Upstream would accept a patchset that exposed an independent Gunyah-specific UAPI (why not the same one as downstream — crosvm already supports that) instead of pretending to be KVM (it's not a "port", you can't port a hypervisor to a hypervisor).
KVM is available on current compute platforms (laptops) if you escape to EL2 via slbounce; and on Glymur (X2E) it will be available by default (yay!).
X1E laptops have fully working DisplayPort+USB3+USB2+PD over USB-C unlike Asahi Macbooks :p There really aren't that many gaps in X1E laptop support left.
EL2 is coming by default on Glymur (X2E) (yaaaay), can be enabled in config on some IoT platforms, and can be booted into via Secure Launch on previous compute platforms (Hamoa/Purwa aka X1E/X1P, SC8280XP), search for slbounce.
On phone platforms.. probably not? Or Android might want it for pKVM..
From a quick look, the patch doesn't seem to contain references to Metal, but just a lot of random updates—backports from upstream Wine to the CrossOver thing?—including an AMD ADL implementation that is clearly for Linux (using /sys/class/… stuff). Maybe the whole toolkit is… literally just CrossOver?
Seeing "Sizzle" in that profile made me feel shocked. Uhhh Wikipedia actually still uses an ancient build of jQuery that does not take advantage of native querySelector at all?!?
> Did you know that technologies such as Intel Boot Guard that have existed for the better part of a decade defend well against such attacks that might seek to overwrite flash memory?
It's rather funny to see Boot Guard as a "good" example here. Boot Guard is what's actually taking freedom away. With a vendor-locked Boot Guard configuration, you cannot replace the firmware with anything not signed by the vendor. Bye bye dreams of coreboot (until a private key leaks like it just did ha ha).
Netflix & co denying service to machines that don't pass Microsoft attestation? Literally who cares, just go to The Pirate Bay instead.
Wait so they… they have a hook in the mmap() equivalent that allows AV software to scan new pages mapped as executable? I see the reasoning but damn does that feel cursed.
Another really important aspect everyone is forgetting is the location privacy problem with being "naked" on a residential IP address. The best reason to relay your traffic through a provider like Mullvad is so that some random forum admin who disliked your posts doesn't GeoIP you down to your city district.
?? It's entirely identical to the desktop version. Desktop is just an electron wrapper that adds fancy integration like rich presence and in-game overlays and whatever else.
Valve is pretty good at this, and they don't even use kernel level anti-tampering as a facet. Trust factor, VACnet (machine learning) and overwatch (community demo review) add up to a system that's pretty decent at not matching you with cheaters if you aren't one.
All of those are "general purpose". That phrase doesn't mean "perfect official support for whatever alternative OS you like", it usually means something closer to "you are not forbidden from running your own code, even at a high privilege (kernel) level".
MrChromebox currently publishes only RW_LEGACY firmware (not full ROM, only replacing the stock SeaBIOS) for AMD Picasso/Dali and Intel Tiger Lake devices, but a) that's enough to boot whatever you want and b) you can build your own full ROM.