Devconf.cz 2023

Confidential Computing is a set of technologies, such as memory encryption, enabling virtual machine that protect data in use. It is relatively complicated to setup.

In this walkthrough, we will start with a machine straight out of the box, and see what steps are required to be able to run containerized workloads that benefit from confidential computing. This talk will cover the following aspects:

1. Setting up a machine to run workloads on (e.g. on-premise vs. in the cloud)
2. Possible architectures to run workloads (confidential containers, VMs, clusters and workloads)
3. Preparing the workload (encrypting images, host vs. tenant security realms)
4. Running the workload (attestations, virtual TPM, other security considerations)