Andrea Barisani
@andreabarisani
hacker | tamagopher
TamaGo running in QEMU virt on loong64. I cannot understand how easy it is to add new architectures and processors.
Running, for the first time ever I guess, an LLM model in bare metal Go thanks to TamaGo.
Thanks AiNEKKO for the shout out <3 on your new website (nekko.ai)
By merging github.com/abarisani/ka... github.com/usbarmory/ta... I wired up agents to the AMD SEV-SNP Guest Hypervisor Communication Block. I now witness Claude trying to escape my Confidential VM. Thanks to TamaGo what feels a master thesis project is rather a 10m integration.
The recent addition of a Google Compute Engine Virtual Ethernet (gVNIC) driver in TamaGo now allows networked GCP Confidential VMs. A small, reproducible, memory-safe unikernel, yet allowing use of the entire Go ecosystem, all measured at launch as a single binary.
Following upstream Go, tamago 1.26.5 has been released! This release brings support for Nuvoton NUC980 SoC, Google Compute Engine Virtual Ethernet (gVNIC) and compiler support for GOARCH=loong64 and GOARM=5. github.com/usbarmory/ta... github.com/usbarmory/ta...
I had a blast at @gopherconeu.bsky.social, great questions and great feedback. Often TamaGo feels magic at first, but makes total sense afterwards, many reacted this way and it is so humbling. I also added for the first time my thoughts on AI and what bare metal Go brings to the table.
We performed an extensive comparison of Linux vs. TamaGo network performance under a VM. TamaGo+gVisor outperforms Linux (native or gVisor) by a ratio range of 50% - 500% (depending on packet size and core count). Test envs are simpler than prod, but I think this is promising.
It's release day! * tamago-go v1.26.4 following Go upstream * tamago v1.26.4 bringing SMP in UEFI, AMD SEV-SNP * go-boot v1.7 bringing SMP to its UEFI library github.com/usbarmory/ta... github.com/usbarmory/go...
First TamaGo unikernel with working SMP under UEFI + AMD SEV-SNP. This enables multiprocessor pure GO confidential unikernels! I will expose SMP initialization APIs from both UEFI (StartupAllAPs) and SEV-SNP (GHCB Create AP).
TamaGo compiler and library 1.26.3 are now live, tracking Go recent release. Another changelog packed with improvements, particolarly for UEFI and SEV-SNP environments. github.com/usbarmory/ta...
TamaGo allows not only build reproducibility but also *execution reproducibility*. Our bare metal Go runtime API allows for deterministic interaction with VMs. With support for tiny RISCV64 targets this allows full deterministic execution of Go zero-knowledge proof (ZKP) apps.
I released TamaGo 1.26.2, this is our biggest release so far! New support for aifoundry.org ET-SoC-1, Erbium as well as Microchip LAN969x. Interrupt API for RISC-V and support for low memory targets. github.com/usbarmory/ta...
Once in a while we get at stab at schematics and PCB routing again. We are squeezing a TROPIC01 on the USB armory 😀
I added a UEFI target to kanzashi, which uses TamaGo to bridge LLM libraries with bare metal execution for security vulnerability exploration. As TamaGo unikernel run pretty much anywhere, it makes it for a quite interesting "smart" fuzzer. Next up: AMD SEV-SNP target. github.com/abarisani/ka...
I want to go back in a world where documentation is like this.
I am happy to announce that I'll be speaking at @gopherconeu.bsky.social this June. I will showcase the latest TamaGo developments and its security benefits from embedded to cloud! www.gophercon.eu#/speakers
TamaGo was created to prove that layers often assumed far away can coexist seamlessly. The kanzashi project runs Claude/Gemini SDKs on bare metal and performs, without any OS interference, agentic investigation of the architectural attack surface. github.com/abarisani/ka...
TamaGo is now ported to aifoundry.org Erbium processor! The erbium_emu demo is live at: github.com/usbarmory/ko... I so look forward to expand support for this platform with a meaningful workload API, taking advantage of bare metal Go!
I hacked TamaGo exception handler to report invalid register Read/Writes without crashing the VM. I used this to extend bare metal Go LLM-fuzzing all x86_64 I/O controllers. 60 seconds. "Let me try writing to redirection entries with malicious values". Hypervisor coredumps.