Skip to content

MarbleRun is the control plane for confidential computing. Deploy, scale, and verify your confidential microservices on vanilla Kubernetes. 100% Go, 100% cloud native, 100% confidential.

License

edgelesssys/marblerun

master
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 
 
 
 
 
cli
 
 
cmd
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

MarbleRun

logo

GitHub Actions Status GitHub license Go Report Card PkgGoDev Discord Chat

MarbleRun is a framework for creating distributed confidential-computing apps.

Build your confidential microservices with EGo or another runtime, distribute them with Kubernetes on an SGX-enabled cluster, and let MarbleRun take care of the rest. Deploy end-to-end secure and verifiable AI pipelines or crunch on sensitive big data in the cloud.

MarbleRun guarantees that the topology of your distributed app adheres to a Manifest specified in simple JSON. MarbleRun verifies the integrity of services, bootstraps them, and sets up encrypted connections between them. If a node fails, MarbleRun will seamlessly substitute it with respect to the rules defined in the Manifest.

To keep things simple, MarbleRun issues one concise remote attestation statement for your whole distributed app. This can be used by anyone to verify the integrity of your distributed app.

Key features

🔒 Authentication and integrity verification of microservices with respect to a Manifest written in simple JSON

🔑 Secrets management for microservices

📦 Provisioning of certificates, configurations, and parameters for microservices

🌐 Remote attestation of the entire cluster

Overview

overview

Supported runtimes

MarbleRun supports services built with one of the following frameworks:

More are coming soon.

Quickstart and documentation

See the Getting Started Guide to set up a distributed confidential-computing app in a few steps. See the documentation for details.

Community & help

  • Got a question? Please get in touch via Discord or file an issue.
  • If you see an error message or run into an issue, please make sure to create a bug report.
  • Get the latest news and announcements on Twitter, LinkedIn or sign up for our monthly newsletter.
  • Visit our blog for technical deep-dives and tutorials.

Contributing

Examples

Hello world

We provide basic examples on how to build confidential apps with MarbleRun:

Advanced

In case you want to see how you can integrate popular existing solutions with MarbleRun, we provide more advanced examples:

  • See gramine-nginx for an example of converting an existing Gramine application to a Marble
  • See gramine-redis for a distributed Redis example using Gramine

Confidential emoji voting

The popular Linkerd service mesh uses the simple and scalable emojivoto app as its default demo. Check out our confidential variant. Your emoji votes have never been more secure! 😉

About

MarbleRun is the control plane for confidential computing. Deploy, scale, and verify your confidential microservices on vanilla Kubernetes. 100% Go, 100% cloud native, 100% confidential.

Topics

Resources

License

Code of conduct

Stars

Watchers

Forks

Packages 4

 
 
 
 

Languages