SOV-APPLIANCE-ISO // TURNKEY AIR-GAP BARE-METAL BOOTSTRAPPER

APPLIANCE & BARE-METAL ISO PROVISIONING PORTAL

Turnkey 1U Air-Gapped Appliance ISO Generation // Hardware Enclaves (SGX2 / SEV-SNP)

SOV-APPLIANCE-ISO CERTIFIED

// Air-Gapped Bare-Metal ISO Customizer

Customized 1U Linux Appliance image with hardened hardware enclaves

// Hardware Enclave & Accelerator Kernel Drivers

Air-gapped kernel module tree with immutable cryptographic GPG signatures

GPG SIGNED MODULES

NVIDIA H100 Hopper Confidential Computing (v550.54)

Target: NVIDIA H100 SXM5 / PCIe

Version550.54.14

LicenseNVIDIA Proprietary

Attestation VERIFIED

Mellanox ConnectX-7 400GbE RoCE / InfiniBand

Target: NVIDIA Mellanox NICs

Version24.01-0.3.3

LicenseDual BSD/GPL

Attestation VERIFIED

Intel SGX2 DCAP Enclave Driver & Kernel Scrubber

Target: Intel Xeon Scalable 4th/5th Gen

Version1.41.100.3

LicenseIntel BSD

Attestation VERIFIED

AMD SEV-SNP Guest & Hypervisor Isolation Module

Target: AMD EPYC 9004 Genoa/Bergamo

Version6.8.0-sev

LicenseGPL v2

Attestation VERIFIED

TPM 2.0 TCG Measured Boot & Sealed Key Loader

Target: Infineon / Nuvoton TPM 2.0

Version2.0.4

LicenseApache 2.0

Attestation VERIFIED

// iPXE / PXE Network Boot Configuration

Automated zero-touch bare-metal provisioning script

boot.ipxe configuration

#!ipxe
# SIOS Sovereign 1U Bare-Metal Air-Gapped Network Boot Script
dhcp
set base-url http://boot.sios.bunker.local/images/v3.3
kernel ${base-url}/vmlinuz-6.8.0-sios-sgx2 \
    console=ttyS0,115200n8 \
    prm_reserved_mem=2048M \
    tpm_pcr_measure=7,11 \
    optical_diode_guard=strict \
    intel_sgx=on \
    amd_sev_snp=on \
    root=live:http://boot.sios.bunker.local/images/v3.3/rootfs.squashfs \
    rd.live.image quiet
initrd ${base-url}/initrd.img-6.8.0-sios
boot