/docs/features/protected-storage/ Recent content in Protected Storage on Confidential Containers Hugo en-us /docs/features/protected-storage/confidential-emptydir/ Mon, 01 Jan 0001 00:00:00 +0000 /docs/features/protected-storage/confidential-emptydir/ <p>When using a confidential runtime class, all emptyDir volumes will automatically be created on top of secure block devices. These confidential emptyDir volumes use LUKS2 on top of a block device provided by the host.</p> <p>Confidential emptyDir can be a good fit for a workload that needs to write a lot of secret data to a scratch directory. If stored inside the guest, this data could deplete guest memory. Instead, the confidential emptyDir is backed by a block device provided by the host. The block device is encrypted inside the guest such that the host cannot access the data.</p>