islet
islet copied to clipboard
An on-device confidential computing platform
This PR presents a quick draft for safely creating an instance at a given memory address. As discussed in https://github.com/islet-project/islet/pull/342, utilizing the idea proposed by @L0czek, this approach involves parsing...
The purpose of this change is removing `function overriding` ([specialization feature](https://rust-lang.github.io/rfcs/1210-impl-specialization.html)) in the page table implementation which prevents us from using a `stable rust`. `Level` trait bound in `struct PageTable`,...
Spinlock library for ISLET platform, that provides potential deadlock detection feature for the developers. This library uses conditional compilation feature flags for different uses. Normally it behaves as a locking...
### Mentorship Opportunity for CCC Projects I'm reaching out to let you know that the Linux Foundation can fund three-month mentorships to support technical and documentation efforts for CCC projects....
Currently, the analysis fails due to a conflict between the dependencies of the crates used by `cargo-geiger` (syn, serde-json) and the dependencies of the `ciborium` crate used in the attestation...
Any data abort, happened at an IPA within Protected Address Space, should be considered non-emulatable faults. (otherwise, a malicious host can inject some value into the realm's protected space via...
This PR aims to introduce MIRI testing across all RMI functions to strengthen memory safety within RMM, particularly by addressing potential issues arising from `unsafe code`. To cover all 23...
This PR updates the model-checking report. The results for realm_activate, rec_aux_count, rec_destroy, and version have been added. The rendered version can be temporarily found [here](https://github.com/islet-project/islet/blob/update-mc-doc/doc/islet-model-checking.md).
While running the provisioning setup, we started encountering a truly random errors from various layers of the stack that could not be reproduced in tf-rmm. In detail, we encountered the...
# App provisioning This PR adds app provisioning framework to islet project which allows for installing applications inside realm using OCI containers. The framework components handle everything from downloading, verifying,...