Recent content on Gauthier Jolly
Why I boot Linux from a USB-attached NVMe I run a small home server on a Mini-ITX desktop that I also use as my gaming machine on Windows. The motherboard, an ASRock B550M-ITX/ac, has a single PCIe slot occupied by the GPU and one obvious M.2 slot already taken by the Windows drive. When I wanted to run Linux on the same machine for LLM inference (Ollama, Open WebUI, that sort of thing), I had to…
In a previous post , I explained that the direction most Confidential Computing deployments are converging toward is to reintroduce the TPM abstraction inside the Confidential VM itself . Rather than relying on a physical TPM, the goal is to expose a TPM interface from within the TEE. This design choice is largely pragmatic. It enables a lift-and-shift model for existing operating systems and…
For almost half a decade now, I have been working on Confidential Computing at Canonical. This position has given me a front-row seat to the evolution of Confidential Computing technologies and their applications. One of the most exciting applications is Confidential AI inference, which allows AI models to be hosted and executed in a way that can keep the user’s input data confidential, even…
How immutable operating systems and Confidential Computing can provide a trustworthy foundation for Kubernetes worker nodes
Make your local web server accessible from the internet using Cloudflare Tunnels
Deploy local LLM inference with Ollama and Open WebUI
How to use my image build tool to easily build Desktop images
A fast and modern way to create an package mirror.
What makes a Linux system: Kernels, Root Filesystems, and the Boot Process
How to create and manage virtual networks on you Linux host.
Stop installing the NVIDIA drivers from NVIDIA repos on Ubuntu
Let's see how to use mkosi to build an Ubuntu image
Virtual firmware can be as big as you want, so you can fit a entire kernel.
A temporary directory in the user home folder
Build Ubuntu images from scratch with a CLI tool
Full Disk Encryption on most Linux distro has a major security flow. Why? How to fix it?
How to take advantage of the Kernel's EFI stub to boot without any bootloader
How to use QEMU and a few tricks
How to configure Ubuntu's Firewall to allow SSH in with Tailscale
Understanding where `who` gets its data