Overview

What is the Confidential Containers project?

Confidential Containers encapsulates pods inside of confidential virtual machines, allowing Cloud Native workloads to leverage confidential computing hardware with minimal modification.

Confidential Containers extends the guarantees of confidential computing to complex workloads. With Confidential Containers, sensitive workloads can be run on untrusted hosts and be protected from compromised or malicious users, software, and administrators.

Confidential Containers provides an end-to-end framework for deploying workloads, attesting them, and provisioning secrets.

What hardware does Confidential Containers support?

On bare metal Confidential Containers supports the following platforms:

Accelerators

NVIDIA Multi-Passthrough requires assigning all GPUs on a host to one pod. NVIDIA Protected PCIe additionally requires listing the NVIDIA NVLink switches in the pod.

Clouds

Confidential Containers can also be deployed in a cloud environment using the cloud-api-adaptor. The following platforms are supported.

Attestation

Confidential Containers provides an attestation and key-management engine, called Trustee which is able to attest the following platforms:

Trustee can be used with Confidential Containers or to attest standalone confidential guests. See Attestation section for more information.