ENCLAVE LIFETIME MANAGEMENT DRIVER FOR NITRO ENCLAVES (NE).(9)
π ENCLAVE LIFETIME MANAGEMENT DRIVER FOR NITRO ENCLAVES (NE) π
okay so bestie, welcome to the Kernel API Manual, section (9) β the page is literally titled Enclave lifetime management driver for Nitro Enclaves (NE) and no, I did not make that name up, it's right there. π
real talk though, in the running header and footer the title gets squeezed down to Enclave lif...claves (NE).(9) because apparently even man pages have a word count era. π so if you see that truncated little gremlin up top or down at the bottom, that's just this page. same energy, same page, just wearing a crop top.
π¦ THE ACTUAL TEA π¦
Nitro is a hypervisor that has been developed by Amazon. that's it, that's the lore drop. no cap, that's the whole description β the page is short and it knows it. π«Ά
β¨ SEE ALSO β¨
before we get into the links, the page points at the kernel file
./drivers/virt/nitro_enclaves/ne_misc_dev.c
like, that's the source bestie, that's where the whole thing lives. go touch grass in that file sometime. πΈ
and now the full friend group, in order, no one left behind, every single (9) intact because we do not abbreviate in this house π
NE_CPUS_SIZE(9)β the cpus-size one, slayNE_EIF_LOAD_OFFSET(9)β the EIF load offset oneNE_MIN_ENCLAVE_MEM_SIZE(9)β the minimum enclave mem size oneNE_MIN_MEM_REGION_SIZE(9)β the minimum mem region size oneNE_PARENT_VM_CID(9)β the parent VM CID onestruct ne_cpu_pool(9)β struct, cpu pool, iconicstruct ne_phys_contig_mem_regions(9)β struct, phys contig mem regions, also iconicne_check_enclaves_created(9)β the checking-if-enclaves-created onene_setup_cpu_pool(9)β setting up the cpu poolne_teardown_cpu_pool(9)β tearing down the cpu pool, the sad sequel πne_set_kernel_param(9)β set that kernel paramne_donated_cpu(9)β the donated cpu one πne_get_unused_core_from_cpu_pool(9)β grabbing an unused core out the cpu poolne_set_enclave_threads_per_core(9)β set the enclave threads per corene_get_cpu_from_cpu_pool(9)β get a cpu from the cpu poolne_get_vcpu_core_from_cpu_pool(9)β get the vcpu core from the cpu pool, the more specific queenne_check_cpu_in_cpu_pool(9)β vibe check: is this cpu in the cpu poolne_add_vcpu_ioctl(9)β the add vcpu ioctlne_sanity_check_user_mem_region(9)β sanity check the user mem regionne_sanity_check_user_mem_region_page(9)β sanity check the user mem region page, one level deeper π§ne_sanity_check_phys_mem_region(9)β sanity check the phys mem regionne_merge_phys_contig_memory_regions(9)β merge those phys contig memory regionsne_set_user_memory_region_ioctl(9)β the set user memory region ioctlne_start_enclave_ioctl(9)β start the enclave, main character energy π₯ne_enclave_ioctl(9)β the enclave ioctlne_enclave_remove_all_mem_region_entries(9)β remove all mem region entriesne_enclave_remove_all_vcpu_id_entries(9)β remove all vcpu id entriesne_pci_dev_remove_enclave_entry(9)β pci dev remove enclave entryne_enclave_release(9)β release the enclave π¦ne_enclave_poll(9)β poll the enclavene_create_vm_ioctl(9)β create that vm ioctlne_ioctl(9)β and the plainne_ioctl(9)finale, periodt π
okay that's genuinely the whole page. it's a stub, it's cute, it's giving "index card taped to the fridge." go read the SEE ALSOs, they're where the actual content lives. π
and that's a wrap, bestie β this page lives in ./drivers/virt/nitro_enclaves, and it's dated October 2026 β so yes, it's from the future, and yes, it still only has a two-line description. obsessed. π
π¦ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms