I had completely forgetten about init_on_free…
Maybe this thread would be more interesting with a new title like “What methods could be used in Qubes to improve protection of memory contents?”
I’d really like to know more about memory encryption - I thought it was only available in recent high-end hardware, but does it work transparently out-of-the-box, and could it ever be implemented in the kernel?
Then there’s the related swap encryption, and what else ?
[edit: looking back a little I see I had skipped over the recent cold-boot protection thread… which reminds us about Xen memory scrubbing. ]