Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Correct. It does the bare minimum system calls to boot the system, then exec to an unprivileged service manager on a read only nosuid, nodev filesystem.

I design confidential compute systems.

 help



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: