Demystifying Confidential Computing: An update for enthusiasts & professionals

on YouTube ↗23m

" summary

Covers concrete stack and status: guest support lands in Linux 5.19, SEV-SNP host support in 6.11 and TDX host in 6.16; QEMU supports SEV in 9.1 and TDX in 10.1 and libvirt follows (SEV 10.5, TDX 11.6). Describes a Coconut SVSM paravisor with monthly dev releases and planned host kernel support early 2026, UKI for boot integrity, keylime + trusty for preboot and runtime attestation, container integration via libk run and confidential containers plus OpenShift CVMs shipping SEV on 4.19 and TDX coming in 4.20.

AI-written summary · about

" chapters (13)

1. 0:00Confidential computing intro
2. 1:05Trusted execution environments
3. 2:53Risks in untrusted VMs
4. 3:58Attestation secures VMs
5. 5:22Linux kernel support
6. 6:50Secure VM service module
7. 7:54Securing boot with UKIs
8. 9:01Remote attestation tools
9. 10:04Confidential containers
10. 11:47Confidential Kubernetes clusters
11. 12:49TEE shared libraries
12. 14:15Libkrun and microVMs
13. 15:24Q&A

" related talks

• 36mEverybody is talking about Confidential Computing - the minimum Devs should knowYash Mankad, Klaus Heinrich Kiwi · DevConf.US 2024
• 44mAdvancements in Confidential ComputingVojtech Pavlik · CloudOpen @ Open Source Summit North America 2023
• 33mAMD Encrypted Virtualization UpdateDavid Kaplan · Linux Security Summit Europe 2018
• 16mIntroduction to confidential computingFelix Schuster · OC3 2023
• 45mSecuring Confidential VMs with COCONUT-SVSMJörg Rödel · Linux Security Summit North America 2024
• 17mLessons learned: scaling confidential clusters on OpenStackMoritz Eckert, Samuel Kunkel · OC3 2023
• 27mTrust No One: Bringing Confidential Computing to ContainersEric Ernst, Samuel Ortiz · KubeCon + CloudNativeCon Europe 2021
• 12mThe Power of Confidential Computing: Exploring Open Source ProjectsSal Kimmich · SOSS Fusion 2024