Confidential computing - state of adoption in other technologies - Githubissues

SovereignCloudStack / issues

This repository is used for issues that are cross-repository or not bound to a specific repository.

https://github.com/orgs/SovereignCloudStack/projects/6

2 stars 1 forks source link

Confidential computing - state of adoption in other technologies #43

Open fkr opened 2 years ago

fkr commented 2 years ago

As the SCS community, it is of interest to us to have a understanding of the state of adoption of confidential computing in other technologies.

If I run kubernetes on bare metal, is SGX available to the container runtime?
how is the adoption on the operating system side of things? eg. does it require to run latest/bleeding edge kernel
...

Definition of Ready:

[ ] User Story is small enough to be finished within one sprint
[ ] User Story is clear and understood by the whole team
[ ] Acceptance criteria are defined
[ ] Acceptance criteria are clear and understood by the whole team

Definition of Done:

[ ] All acceptance criteria are met
[ ] Changes have been reviewed
[ ] CI tests have run successfully
[ ] Documentation has been updated
[ ] Release Notes have been updated

mleberec commented 2 years ago

If the kernel version of the bare-metal OS is 5.11 or later, the kernel supports SGX by default (in-kernel driver) so it should reflect as well in any container. You may have to additionally install the necessary libraries and SDKs inside the container to properly use SGX.