TamaGo running in QEMU virt on loong64. I cannot understand how easy it is to add new architectures and processors.
Andrea Barisani
@andreabarisani.bsky.social
hacker | tamagopher | https://andrea.bio
Running, for the first time ever I guess, an LLM model in bare metal Go thanks to TamaGo.
Ooops!
Andrea Barisani@andreabarisani.bsky.social · 2w agoBy merging github.com/abarisani/ka... github.com/usbarmory/ta... I wired up agents to the AMD SEV-SNP Guest Hypervisor Communication Block. I now witness Claude trying to escape my Confidential VM. Thanks to TamaGo what feels a master thesis project is rather a 10m integration.
By merging github.com/abarisani/ka... github.com/usbarmory/ta... I wired up agents to the AMD SEV-SNP Guest Hypervisor Communication Block. I now witness Claude trying to escape my Confidential VM. Thanks to TamaGo what feels a master thesis project is rather a 10m integration.
And another TamaGo talk (2 total) at the upcoming OSFC later this year! ❤️ “Running baremetal Go in the AST2700 for simpler server management” by Marvin Drees talks.osfc.io/osfc-2026/ta...
Running baremetal Go in the AST2700 for simpler server management Open Source Firmware Conference 2026
This talk will go into detail how porting Tamago to the AST2700 went, what blockers came up and which milestones were reached along the way. This includes proper baremetal networking in Go and even im...
talks.osfc.io
The recent addition of a Google Compute Engine Virtual Ethernet (gVNIC) driver in TamaGo now allows networked GCP Confidential VMs. A small, reproducible, memory-safe unikernel, yet allowing use of the entire Go ecosystem, all measured at launch as a single binary.
Sadly I won't attend the 2026 Open Source Firmware Conference (www.osfc.io), but I am excited to see a talk leveraging TamaGo! A whole new world - Running a PBA on 'bare-metal UEFI' with TamaGo by Christian Walter and Christian Grönke. talks.osfc.io/osfc-2026/ta...
Home - OSFC
Change the way of firmware development, collaborate with others and share knowledge.
osfc.io
Following upstream Go, tamago 1.26.5 has been released! This release brings support for Nuvoton NUC980 SoC, Google Compute Engine Virtual Ethernet (gVNIC) and compiler support for GOARCH=loong64 and GOARM=5. github.com/usbarmory/ta... github.com/usbarmory/ta...
I had a blast at @gopherconeu.bsky.social, great questions and great feedback. Often TamaGo feels magic at first, but makes total sense afterwards, many reacted this way and it is so humbling. I also added for the first time my thoughts on AI and what bare metal Go brings to the table.
Shout out to @tinygo.org team member Patricio Whittingslow's amazing "lneto" network stack used by both TamaGo and TinyGo! #gopherconEU #golang #tinygo #tamago
We performed an extensive comparison of Linux vs. TamaGo network performance under a VM. TamaGo+gVisor outperforms Linux (native or gVisor) by a ratio range of 50% - 500% (depending on packet size and core count). Test envs are simpler than prod, but I think this is promising.
TamaGo unikernels can now seamlessly switch between gVisor and lneto network stacks! Thanks Patricio Whittingslow for lneto and its go-net integration. When I started TamaGo I was worried that getting a pure Go TCP/IP stack would be hard, now we have 2 choices! github.com/usbarmory/go...
GitHub - usbarmory/go-net: Bare metal Go TCP/IP connectivity
Bare metal Go TCP/IP connectivity. Contribute to usbarmory/go-net development by creating an account on GitHub.
github.com
Space Fabric: A Satellite-Enhanced Trusted Execution Architecture "The satellite’s TEE is implemented using ARM TrustZone, with GoTEE as the Trusted OS running in Secure World" GoTEE has been to orbit twice already, time for a stable orbit? arxiv.org/abs/2603.23745
Space Fabric: A Satellite-Enhanced Trusted Execution Architecture
The emergence of decentralized satellite networks creates a pressing need for trust architectures that operate without physical access to hardware, without pre-provisioned vendor secrets, and without ...
arxiv.org
It's release day! * tamago-go v1.26.4 following Go upstream * tamago v1.26.4 bringing SMP in UEFI, AMD SEV-SNP * go-boot v1.7 bringing SMP to its UEFI library github.com/usbarmory/ta... github.com/usbarmory/go...
First TamaGo unikernel with working SMP under UEFI + AMD SEV-SNP. This enables multiprocessor pure GO confidential unikernels! I will expose SMP initialization APIs from both UEFI (StartupAllAPs) and SEV-SNP (GHCB Create AP).
TamaGo compiler and library 1.26.3 are now live, tracking Go recent release. Another changelog packed with improvements, particolarly for UEFI and SEV-SNP environments. github.com/usbarmory/ta...
I added IRQ and SMP support for TamaGo amd64 unikernels booted directly under UEFI! IRQs also work under UEFI + SEV-SNP, though SMP needs more work under Confidential VMs (because APs startup is different). What a fascinating journey to learn so many gory bits and details.
... also now: Tailscale running on UEFI on AWS EC2. No kernel. No OS. (Tamago) Had to port AWS ENA drivers to Go (from FreeBSD, DPDK, Amazon spec) Also fun: it's using UEFI variables as its ipn.StateStore, so you can reboot the instance and it's still logged in. This was a PITA even with AI.
Would you buy a USB armory in @frame.work expansion card format?
Tailscale on UEFI ... who needs an OS, really? (using github.com/usbarmory/ta...) And yes, clearly putting a bootloader in here is an obvious next step 😉 This week is Hack Week at Tailscale. This is one of the 4 weird new places I got Tailscale running. #golang #tamago #tailscale #hackweek
TamaGo allows not only build reproducibility but also *execution reproducibility*. Our bare metal Go runtime API allows for deterministic interaction with VMs. With support for tiny RISCV64 targets this allows full deterministic execution of Go zero-knowledge proof (ZKP) apps.
