Confidential computing - state of adoption in other technologies

[fkr]

As the SCS community, it is of interest to us to have a understanding of the state of adoption of confidential computing in other technologies.

• If I run kubernetes on bare metal, is SGX available to the container runtime?
• how is the adoption on the operating system side of things? eg. does it require to run latest/bleeding edge kernel
• ...

Definition of Ready:

• User Story is small enough to be finished within one sprint
• User Story is clear and understood by the whole team
• Acceptance criteria are defined
• Acceptance criteria are clear and understood by the whole team

Definition of Done:

• All acceptance criteria are met
• Changes have been reviewed
• CI tests have run successfully
• Documentation has been updated
• Release Notes have been updated

[mleberec]

If the kernel version of the bare-metal OS is 5.11 or later, the kernel supports SGX by default (in-kernel driver) so it should reflect as well in any container. You may have to additionally install the necessary libraries and SDKs inside the container to properly use SGX.