Speeding up Linux disk encryption
Data encryption at rest is a must-have for any modern Internet company. Many companies, however, don't encrypt their disks, because they fear the potential performance penalty caused by encryption overhead. Encrypting data at rest is vital for Cloudflare with more than 200 data centres across the world. In this post, we will investigate the performance of disk encryption on Linux and explain how w
Live-patching security vulnerabilities inside the Linux kernel with eBPF Linux Security Module
Live-patching security vulnerabilities inside the Linux kernel with eBPF Linux Security Module2022-06-29 Linux Security Modules (LSM) is a hook-based framework for implementing security policies and Mandatory Access Control in the Linux kernel. Until recently users looking to implement a security policy had just two options. Configure an existing LSM module such as AppArmor or SELinux, or write a
Transparent memory offloading: more memory at a fraction of the cost and power
Transparent memory offloading: more memory at a fraction of the cost and power Transparent memory offloading (TMO) is Meta’s data center solution for offering more memory at a fraction of the cost and power of existing technologies In production since 2021, TMO saves 20 percent to 32 percent of memory per server across millions of servers in our data center fleet We are witnessing massive growth i
ipftrace2ã§å§‹ã‚ã‚‹Linuxãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¹ã‚¿ãƒƒã‚¯æŽ¢è¨ª - Qiita
皆ã•ã‚“ã¯Linuxãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¹ã‚¿ãƒƒã‚¯ã®å•é¡Œã«ã‚ãŸã£ã¦ã—ã¾ã£ãŸæ™‚ã€ã‚ã‚‹ã„ã¯å˜ãªã‚‹èˆˆå‘³ã§Linuxãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¹ã‚¿ãƒƒã‚¯ã®ä¸ã‚’調ã¹ãŸã„ã¨æ€ã„ç«‹ã£ãŸæ™‚ã€ã©ã®ã‚ˆã†ã«ã—ã¦èª¿æŸ»ã‚’進ã‚ã¾ã™ã‹ï¼Ÿã‚«ãƒ¼ãƒãƒ«ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã« printk を仕込んã§ã‚«ãƒ¼ãƒãƒ«ã‚’å†ã‚³ãƒ³ãƒ‘イルã™ã‚‹ã§ã—ょã†ã‹ï¼Ÿã‚‚ã—ãã¯æœ€åˆã‹ã‚‰ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’èªã‚€ã¨ã„ã†å¼·ã„方もã„らã£ã—ゃるã‹ã‚‚ã—ã‚Œã¾ã›ã‚“。ã©ã¡ã‚‰ã®æ–¹æ³•ã‚‚ãªã‹ãªã‹ã®èŒ¨ã®é“ã§ã™ã€‚ãŠãらãã€ã»ã¨ã‚“ã©ã®æ–¹ã¯æœ€çµ‚çš„ã«ftrace ã‚„bpftraceãªã©ã®Dynamic Tracingツールを使ã£ã¦ã€ã‚«ãƒ¼ãƒãƒ«ã®å‹•ä½œã‚’実際ã«å‹•ã‹ã—ãªãŒã‚‰è¦‹ã‚‹ã¨ã„ã†æ–¹æ³•ã«è‡³ã‚‹ã¨æ€ã„ã¾ã™ã€‚ ã“ã®è¨˜äº‹ã§ã¯ ipftrace2 ã¨ã„ã†Dynamic Tracingツールã®åŸºæœ¬çš„ãªä½¿ã„方をサンプルã¨ã¨ã‚‚ã«ç´¹ä»‹ã—ã¾ã™ã€‚ipftrace2ã¯ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¹ã‚¿ãƒƒã‚¯ã€ç‰¹ã«ãƒ‘ケット処ç†ã®éƒ¨åˆ†ã‚’トレーシングをã™ã‚‹ã“ã¨ã«ç‰¹åŒ–ã—ãŸä½œã‚Šã«ãªã£ã¦ãŠã‚Šã€
The Linux Kernel documentation — The Linux Kernel documentation
The Linux Kernel documentation¶ This is the top level of the kernel’s documentation tree. Kernel documentation, like the kernel itself, is very much a work in progress; that is especially true as we work to integrate our many scattered documents into a coherent whole. Please note that improvements to the documentation are welcome; join the linux-doc list at vger.kernel.org if you want to help out.
ランã‚ング
ランã‚ング
ãŠçŸ¥ã‚‰ã›
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
kCTF VRP Setup
GitHub - containers/libkrun: A dynamic library providing Virtualization-based process isolation capabilities
GitHub - sysprog21/vwifi: A virtual wireless device driver for Linux
GitHub - eecheng87/ESCA: Effective System Call Aggregation
GitHub - osandov/drgn: Programmable debugger
kernel/common-patches - Git at Google
GitHub - google/ghost-kernel
GitHub - amazonlinux/linux: Linux kernel stable tree mirror
[v5,1/1] NAX LSM: Add initial support - Patchwork
GitHub - zen-kernel/zen-kernel: Zen Patched Kernel Sources
https://blogs.oracle.com/linux/post/writing-the-ultimate-locking-check
Rust in the Linux kernel
GitHub - cifsd-team/ksmbd: ksmbd kernel server(SMB/CIFS server)
[PATCH v3 1/1] fs: Allow no_new_privs tasks to call chroot(2) - Mickaël Salaün
Linux for Tegra kernel patches – random blog
{{#tags}}- {{label}}
{{/tags}}