enclaver VS linux-surface

If you're looking for the best way to take a container and run it with Nitro, I work on https://github.com/edgebitio/enclaver

Works great with Kubernetes as a DaemonSet or straight on a VM.

Building a tool for running secure enclaves called Enclaver (https://github.com/edgebitio/enclaver). There is a big opportunity for keeping data encrypted while running code against it within enclaves.

And a more secure software supply chain is possible with device attestation and cryptographic measurements of software.

Check out the code on GitHub: https://github.com/edgebitio/enclaver

I'm building the "in-use" part of this right now...what if you could encrypt your data with an encryption key (at-rest), _but also_ to a set of code that is allowed to decrypt it (in-use). If that code is identified cryptographically, its identity can't be spoofed or stolen.

We're exploring secure enclaves as the protected runtime env and the code attestation generation: https://github.com/edgebitio/enclaver

I have been building out an open source project called Enclaver, which allows you to wrap sensitive workloads inside of a secure enclave (the same as your iPhone, but on servers). It's intended for anything you don't want observed, like JWT signers, encryption/decryption, partner integrations using highly privileged API keys, etc.

I found the side channel protection and CPU/L1 isolation between customers to be particularly interesting.

Very cool to see the physical hardware interconnects for resetting the system. Also the PCI bus as one of the isolating boundaries.

I have built an open source project for managing Nitro Enclaves (https://github.com/edgebitio/enclaver), so it is cool to see how these build on this foundation to provide even more protection.

Apart from camera, almost everything is working correctly. Camera doesn't work at all.

https://github.com/linux-surface/linux-surface

I use this kernel, you can use this with most operating systems.

I use xournal++ for note writing, and using GNOME is necessary. KDE doesn't have support for screen rotation etc. When you use GNOME, make sure to disable gestures and screen edge detection, because that might occasionally cause problems.

So, the workflow is quite simple with xournal++, you run a `inotify` based watched which automatically compiles and pushes stuff on every save. I of course assume that only `xournal++` on tab can change those handwritten notes. You can get some fancier git logic if needed.

```

while inotifywait -e modify,create,delete,move $INPUT;

There's support for Linux on the Surface range:

https://github.com/linux-surface/linux-surface/wiki/Supporte...

But actual users seem to say it's a bit of a mixed bag.

If someone's looking for a laptop (that doesn't need touchscreen support), then Apple laptops are probably the better choice.

How to get out of this situation? Links https://github.com/linux-surface/linux-surface/issues/1240 - the same problem as I have and the same puncture, but the person managed to get out of the situation https://www.reddit.com/r/SurfaceLinux/comments/16d40vs/kill_my_surface_pro_2017_need_help/ - my similar post in a nearby subreddit, but since I'm here, the problem turned out to be bigger than I thought

https://github.com/linux-surface/linux-surface

Should have you covered.

I went the 12” MacBook route which can also install Linux.

I have a surface with Ubuntu and the Surface Kernel (https://github.com/linux-surface/linux-surface) , and it works really wonderfully. I will say, before installing the Surface Kernel, it was very janky.

I know about https://github.com/linux-surface/linux-surface but I'm looking for practical feedback from people who did the operation in order to orient my choice.