Realizing Confidential VMs Ensuring Privacy of AI Features
summary
Private cloud deploys AMD SEV-SNP with attestation so mobile apps verify a 64-byte field embedding a container public key and establish TLS directly to a VM whose initial memory hash matches a trusted value. OpenStack gains OpenStack nova patches and OVMF provisioning, kernel cmdline now carries a DM-verity root hash and a container image hash, cmdline length limit is raised, and flavor-based CPU model pinning stabilizes measurements so runtime remains as attested.
AI-written summary · about
chapters (4)
related talks
17mLessons learned: scaling confidential clusters on OpenStack
13mVM Security with Confidential Computing
36mConfidential VMs in the cloud
44mAdvancements in Confidential Computing
27mTrust No One: Bringing Confidential Computing to Containers
40mDon’t Trust Opaque Clouds, Cryptographically Verify Instead!
30mK8s meets confidential computing - the different ways of scaling sensitive workloads
31mConfidential Containers – Sensitive Data and Privacy in Cloud Native Environments