this post was submitted on 13 Nov 2025
347 points (99.2% liked)

Linux Gaming

22291 readers
234 users here now

Discussions and news about gaming on the GNU/Linux family of operating systems (including the Steam Deck). Potentially a $HOME away from home for disgruntled /r/linux_gaming denizens of the redditarian demesne.

This page can be subscribed to via RSS.

Original /r/linux_gaming pengwing by uoou.

No memes/shitposts/low-effort posts, please.

Resources

WWW:

Discord:

IRC:

Matrix:

Telegram:

founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] fruitycoder@sh.itjust.works 6 points 2 weeks ago (2 children)

You absolutely can have that and more, what we in industry, attestation on Linux. Though the most obvious adaptation of that would the confidential computing space for key bits of the game data instead of the whole fucking OS. Though hardware level memory encryption is a server CPU feature that I don't think any desktop ones support yet

[–] noxypaws@pawb.social 2 points 2 weeks ago (2 children)

Ryzen so-called "AI" Max Pro has hardware level memory encryption, at least it does on my HP ZBook. But it might be actually be the first laptop to do that as far as I know

[–] fruitycoder@sh.itjust.works 3 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

Ahh, it's a got a system called Memory Guard but that is just brand name for Transparent SME. Which still, freaking finally, that's awesome. Though in the context of confidential computing, where container/VM memory spaces are assured through encryption it doesn't help since there is no granular page control just the entire memory system transparently to the system above.

Though I'm not sure if that is a hardware, firmware, or driver limitation (I think below driver because of the reports I saw of fedora failing to boot with the kernel flag set to use it).

https://en.wikichip.org/wiki/x86/sme

[–] noxypaws@pawb.social 3 points 2 weeks ago

On my laptop it seems totally transparent to the OS, but I haven't tried setting any kernel params for it, didn't even occur to me there was such a thing but it'd make sense if there is

[–] fruitycoder@sh.itjust.works 2 points 2 weeks ago

Ooohh, awesome! I gotta check that out then.

[–] Evotech@lemmy.world 2 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

Yeah confidential compute would be the way to go. But it's expensive and not mainstream yet

[–] fruitycoder@sh.itjust.works 1 points 2 weeks ago

Worse yet is gaming is normally a lot PCIe data, that encryption is still very expensive performance wise.