this post was submitted on 13 Nov 2025
343 points (98.9% liked)

Linux Gaming

22114 readers
381 users here now

Discussions and news about gaming on the GNU/Linux family of operating systems (including the Steam Deck). Potentially a $HOME away from home for disgruntled /r/linux_gaming denizens of the redditarian demesne.

This page can be subscribed to via RSS.

Original /r/linux_gaming pengwing by uoou.

No memes/shitposts/low-effort posts, please.

Resources

WWW:

Discord:

IRC:

Matrix:

Telegram:

founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] fruitycoder@sh.itjust.works 6 points 3 days ago (2 children)

You absolutely can have that and more, what we in industry, attestation on Linux. Though the most obvious adaptation of that would the confidential computing space for key bits of the game data instead of the whole fucking OS. Though hardware level memory encryption is a server CPU feature that I don't think any desktop ones support yet

[–] Evotech@lemmy.world 2 points 2 days ago* (last edited 2 days ago) (1 children)

Yeah confidential compute would be the way to go. But it's expensive and not mainstream yet

[–] fruitycoder@sh.itjust.works 1 points 2 days ago

Worse yet is gaming is normally a lot PCIe data, that encryption is still very expensive performance wise.

[–] noxypaws@pawb.social 2 points 3 days ago (2 children)

Ryzen so-called "AI" Max Pro has hardware level memory encryption, at least it does on my HP ZBook. But it might be actually be the first laptop to do that as far as I know

[–] fruitycoder@sh.itjust.works 3 points 2 days ago* (last edited 2 days ago) (1 children)

Ahh, it's a got a system called Memory Guard but that is just brand name for Transparent SME. Which still, freaking finally, that's awesome. Though in the context of confidential computing, where container/VM memory spaces are assured through encryption it doesn't help since there is no granular page control just the entire memory system transparently to the system above.

Though I'm not sure if that is a hardware, firmware, or driver limitation (I think below driver because of the reports I saw of fedora failing to boot with the kernel flag set to use it).

https://en.wikichip.org/wiki/x86/sme

[–] noxypaws@pawb.social 3 points 2 days ago

On my laptop it seems totally transparent to the OS, but I haven't tried setting any kernel params for it, didn't even occur to me there was such a thing but it'd make sense if there is

[–] fruitycoder@sh.itjust.works 2 points 2 days ago

Ooohh, awesome! I gotta check that out then.