Container code with confidential containers on Azure
summary
Demonstrates measuring and attesting the entire TCB including container images and runtime config by extending the AMD SNP VM report with a second-layer host data section that contains container policy hashes reflect container image and metadata. Implements this in Azure Container Instances (ACI) public preview using an open-source attestation sidecar and Azure Key Vault for secure key release. Demo shows deployment, a failed restart when an image is swapped (tamper detected), a successful redeploy after updating the policy, and policy-denied interactive shells, all verifiable via remote attestation.
AI-written summary · about
chapters (6)
- 0:00Confidential container goals
- 2:04Securing container workloads
- 5:08Attestation and measurement
- 7:21Confidential ACI architecture
- 10:42Building secure foundations
- 13:16Confidential containers demo
related talks
47mBest-practices for securing your Azure Container Services
48mPentesting Azure Container Services
52mPentesting Azure Container Services
50mConfidential Containers: Why, How, and Where Are We?
29mAzure Container Instances(ACI) use-cases and roadmap
43mSecuring container deployments on Azure Kubernetes Service with open-source tools
31mConfidential Containers – Sensitive Data and Privacy in Cloud Native Environments
59mPentesting Azure Container Services