Forgot to add:
It is a shame that qubes doesn't support POWER.
Due to the ceasing of manufacturing of the KGPE-D16 and D8 boards the
OpenPOWER9 TALOS 2 is soon the only reasonable brand new option for a
performance board with libre firmware/hardware.
It is of course possible to make a virtualization setup on POWER with
different security zones but it wouldn't be as slick as qubes and you
would lack xen's security features like stubdoms although arguably it
would still be more secure than a modern intel/amd system that has
ME/PSP and a litany of other anti-features and security holes.
Info:
* In terms of speed even the base 4 core CPU is faster than a fully
loaded dual 6386SE KGPE-D16 system, and much faster than an intel/amd
system one would buy for the $2.5K price of the TALOS 2 board/4 core cpu
combo.
* OpenPOWER sforza has SMT4 with 4 threads per core so even the base 4
core CPU is very fast, the system maxes out at 96 threads with dual 24
core CPU's.
* It has a nice open source secure IBM OpenBMC firmware for remote
management, PCI-e 4.0 with CAPI, POWER IOMMU and POWER-KVM (virtualization)
* There is absolutely no hardware code signing enforcement, you can even
load your own microcode (and if you are an EE/CS masters, learn how to
make modifications via the IBM provided documentation!)
* When they first were released a brand new KGPE-D16 and a 6386SE would
cost more than the TALOS 2 board/cpu, so it is a reasonable price (it
came down a lot from the previous POWER generation)
* IBM immediately released complete spectre fixes.
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/df790981-e211-c683-ba81-6ee3a1087638%40gmx.com.
For more options, visit https://groups.google.com/d/optout.
