Lightning Talk: Confidential VMs in Kubevirt: Securing VMs With Kube...
summary
KubeVirt implements Confidential VMs using hardware TEEs and demonstrates that guest memory becomes unreadable to the host: a non-confidential VM used a shared‑memory util to read/write guest RAM, while a confidential VM with feature gates and launch security enabled prevented host reads. The implementation targets AMD SEV, Intel TDX and IBM Secure Execution, uses hardware memory encryption for data‑in‑use protection, and the live demo shows the approach works end‑to‑end.
AI-written summary · about
related talks
27mTrust No One: Bringing Confidential Computing to Containers
11mLightning Talk: Computing Confidentially in the Clouds
41mConfidential Computing, from host to workload
36mConfidential VMs in the cloud
38mConfidential Containers Explained
13mVM Security with Confidential Computing
29mConfidential Containers: The Next Era of Cloud Data Security
38mUnmapped Private Memory for Confidential Guests