Andrea Barisani

I called this project kanzashi and I will publish it next week, stay tuned.

I hacked TamaGo exception handler to report invalid register Read/Writes without crashing the VM.

I used this to extend bare metal Go LLM-fuzzing all x86_64 I/O controllers.

60 seconds.

"Let me try writing to redirection entries with malicious values".

Hypervisor coredumps.

I just published kotama, an experimental GOOS=tamago compiler branch that allows execution of a rich example in barely 6MB of RAM, running on an rv64imfc CPU (yes, no d or a extension).

This paves the way for supporting aifoundry.org Minion cores!

github.com/usbarmory/ko...

A very effective way to find all deviations from specs.

It is literally a semantic bridge between the VirtIO specifications and low level implementation.

And I can instantly target any other low level specification, even the CPU ISA itself with more creative wiring.

Next up: UEFI (as I can simply import this in go-boot).

I politely asked it not to nuke its own VirtIO network device.

It was trivial to hook Claude in a bare metal environment using TamaGo.

I wired it up to arbitrary memory read/writes for Virtio MMIO space exploration and it is now trying to escape my QEMU.

All of this in ~200 LOC of crappy code (because Antrophic Go SDK...)

Home TamaGo - bare metal Go. Contribute to usbarmory/tamago development by creating an account on GitHub.

Thanks to @filippo.abyssdomain.expert contribution installing our GOOS=tamago compiler is now as easy as:

go tool tamago

github.com/usbarmory/ta...

PSA: PayPal U2F security key handling ignores incremental counters (unlike GitHub or saner backends)

GitHub - usbarmory/tamago-sev-example: AMD SEV-SNP Go unikernel example AMD SEV-SNP Go unikernel example. Contribute to usbarmory/tamago-sev-example development by creating an account on GitHub.

A bare metal Go unikernel reference for AMD SEV-SNP execution.

Starts under UEFI boot services with UEFI networking or can terminate them and connect through VirtIO networking (or soon gVNIC).

github.com/usbarmory/tamago-sev-example

Our TamaGo framework is now aligned with the fresh Go 1.26.0 release!

This major version brings new handling of GOOS with a GOOSPKG overlay, providing clearer isolation of the runtime API for freestanding Go, in-line with our upstreaming proposal.

github.com/golang/go/is...

Content neutral / Structure rebel

🤣

From: benjojo.co.uk/u/benjojo/h/...

I published tamago and tamago-go 1.25.7!

This release improves AMD SEV-SNP and ARM64 support and tracks Go 1.25.7 changes.

github.com/usbarmory/ta...

Welcome back! :)

Here's a first TamaGo unikernel under AMD SEV-SNP with VirtIO networking PCI driver working with shared guest/host buffers.

Pure Go bare metal Confidential VMs with an option of UEFI, VirtIO or gVNIC networking.

Added AMD SEV-SNP key derivation, page state changes and C-bit enable/disable in our tamago sev package API.

It is now trivial to allocate shared unencrypted DMA for driver implementation using Go heap space.

Manipulating intimate AMD SEV-SNP inners has never been easier!

ASCII characters are not pixels: a deep dive into ASCII rendering A look at how I used shape vectors to achieve sharp, high-quality ASCII rendering.

This is a perfect piece of technical writing. alexharri.com/blog/ascii-r...

I am excited to announce that we are partnering with AI Foundry to bring bare metal Go to their ET platform!

Our journey started with a lonely core and now we have the chance of hitting 1088 on the ET-SoC-1! What a privilege.

I look forward to this!

aifoundry.org

I also released go-boot v1.4 to support pure Go unikernels under AMD SEV-SNP.

UEFI is required at boot to access SNP Secrets page, then you can either remain in the same unikernel (exiting EFI Boot Services) or jump to another TamaGo unikernel ;)

github.com/usbarmory/go...

And following Go 1.25.6 release, TamaGo package and compilers 1.25.6 are released as well.

This release brings pure Go unikernels to Google Compute Engine and AMD SEV-SNP support (both in GCP and local QEMU)!

Following this TARGET=gcp is now added to:
github.com/usbarmory/ta...

TamaGo AMD SEV-SNP support is now tested on physical servers.

This is a networked pure Go UEFI unikernel, launched under QEMU with AMD SEV-SNP, obtaining an attestation report and performing its online verification.

Transparent, reproducible, pure Go Confidential VMs!

A year full of ❤️

And with the full Go ecosystem at this level this also becomes an unbeatable AMD SEV-SNP auditing/fuzzing environment.

TamaGo unikernels can now run in confidential AMD SEV-SNP VMs!

Here's a UEFI bare metal Go unikernel performing a successful attestation request!

Our next releases will include drivers and documentation for AMD SEV-SNP support.

I just released go-boot v1.3, it brings EFI variable display and pagination support.

github.com/usbarmory/go...