<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div><span></span></div><div><meta http-equiv="content-type" content="text/html; charset=utf-8"><div><span></span></div><div><meta http-equiv="content-type" content="text/html; charset=utf-8"><div><span></span></div><div><meta http-equiv="content-type" content="text/html; charset=utf-8"><div><div class=""><span style="background-color: rgba(255, 255, 255, 0);">I'm a contributor to OpenXT, which uses an OE-derived, security-oriented distro within Xen virtual machines that are tested on desktop hardware, while users interact with Windows or Debian/Ubuntu graphical desktop VMs that see only "virtual hardware". </span></div><div class=""><span style="background-color: rgba(255, 255, 255, 0);"><br></span></div><div class=""><span style="background-color: rgba(255, 255, 255, 0);">The next release of OpenXT will be based on Yocto Project 2.0 (jethro). We're having an event soon, more information below. Questions about OpenXT are welcome, we hope to contribute more to meta-virtualization and other OE layers in coming months.</span></div><div class=""><span style="background-color: rgba(255, 255, 255, 0);"><br></span></div><div class=""><span style="background-color: rgba(255, 255, 255, 0);">Rich</span></div><div class=""><span style="background-color: rgba(255, 255, 255, 0);"><br></span></div><div class=""><span style="background-color: rgba(255, 255, 255, 0);">---</span></div><div class=""><span style="background-color: rgba(255, 255, 255, 0);"><br></span></div><div class=""><span style="background-color: rgba(255, 255, 255, 0);">While the Xen Project is well known for servers and hosted infrastructure, Type-1 hypervisors have been used in client endpoints and network appliances, improving security and remote manageability. Virtualization-based security in Qubes and Windows 10 is also educating system administrators about hardware security (IOMMU and TPM) and application trust models.</span></div></div><div><span style="background-color: rgba(255, 255, 255, 0);"><br></span></div><div><div class=""><span style="background-color: rgba(255, 255, 255, 0);">Released as open-source software in 2014, OpenXT is a development toolkit for hardware-assisted security research and appliance integration. It includes hardened Linux VMs that can be configured as a user-facing software appliance for client devices, with virtualization of storage, network, input, sound, display and USB devices. Hardware targets include laptops, desktops and workstations. </span></div><div class=""><span style="background-color: rgba(255, 255, 255, 0);"><br></span></div><div class=""><span style="background-color: rgba(255, 255, 255, 0);">OpenXT stands on the shoulders of the Xen Project, OpenEmbedded Linux and Citrix XenClient XT. It is optimized for hardware-assisted virtualization with an IOMMU and a TPM. It configures Xen network driver domains, Linux stub domains, Xen Security Modules, GPU passthrough, Intel TXT, SE Linux, and VPNs. Guest operating systems include Windows, Linux and FreeBSD. VM storage options include encrypted VHD files with boot-time measurement and non-persistence. </span></div><div class=""><span style="background-color: rgba(255, 255, 255, 0);"><br></span></div><div class=""><span style="background-color: rgba(255, 255, 255, 0);">OpenXT enables loose coupling of open-source and proprietary software components, verifiable measurements of hardware and software, and verified launch of derivative products. It has been used to develop locally/centrally managed software appliances that isolate high-risk workloads, networks and devices. </span></div><div class=""><span style="background-color: rgba(255, 255, 255, 0);"><br></span></div><div><div class=""><span style="background-color: rgba(255, 255, 255, 0);">The inaugural OpenXT Summit brings together developers and ecosystem participants for a 2-day conference in Fairfax, VA, USA on <a dir="ltr" href="x-apple-data-detectors://2" x-apple-data-detectors="true" x-apple-data-detectors-type="calendar-event" x-apple-data-detectors-result="2">June 7-8, 2016</a>. The audience for this event includes kernel and application developers, hardware designers, system integrators and security architects. </span></div><div class=""><span style="background-color: rgba(255, 255, 255, 0);"><br></span></div></div><div class=""><span style="background-color: rgba(255, 255, 255, 0);">There is no cost to attend, but registration is required. For more information, please see the event website at <a href="http://openxt.org/summit" class="">http://openxt.org/summit</a>. For presentations and papers related to OpenXT, please see <a href="http://openxt.org/history" class="">http://openxt.org/history</a>.</span></div></div><div></div></div></div></div></body></html>