Conversation

It's kind of interesting how many general Linux bugs and problems we're running into and fixing as Asahi. Nothing huge, but there's the whole >4K page support issue in random software (which we're pushing on purpose), BTI issues in mesa, lots of random kernel bugs...
3
768
A lot of this is really just "real people are now using Linux on a real, modern ARM64 platform". Up until now there just hasn't been anything *modern* running real distros and a near-upstream kernel. Apple machines are ARMv8.5-A, everything else desktop is stuck on <=ARMv8.2-A.
3
282
Replying to and
And, sadly, as an OS vendor with a minuscule budget, I can't buy anything (!Apple and > ARMv8.0) for sub-$5,000USD. And even now, Cavium ThunderX systems have completely disappeared on auction sites. Last one I purchased was $1500USD. But, years later, I'm still hoping for > 8.1
1
Replying to and
Android works with upstream kernels including mainline but it can't be shipped in production because it's missing CTS mandated security features such as type-based CFI on x86_64 (not upstream) / arm64 (incomplete upstream) and also some minor things like perf_event_paranoid=3.
1
2
Replying to and
The non-hardening stuff was either landed upstream or replaced with BPF such as uid (per-profile-per-app) based network statistics, gid-based socket restrictions for the INTERNET permission (no longer gid-based though) and a bunch of other stuff including most use of netfilter.
1
1
Show replies