Linux on a Confidential VM in a cloud: where's the challenge?

Linux on a Confidential VM in a cloud: where's the challenge? https://peertube.watch/videos/watch/25b4a582-8526-4fc5-963f-3ad152e51b4c Confidential instance types (or CVMs) are the newest addition to public clouds like Microsoft Azure, Google Cloud Platform (GCP) and Amazon Web Services (AWS), some are already generally available and some are still in development/preview. Can we just bring existing general purpose Linux distributions to these environments and get the advertised confidentiality guarantees? Do we need to develop something or maybe we just need to have a specific OS image configuration to enjoy the benefits? The talk will try to answer these questions and explain the differences in the design of the various CVM instance types and discuss the current state of development of various important component upstream as well as their integration in general purpose Linux distributions (Fedora, CentOS Stream, RHEL). Focusing on providing confidentiality of the data at rest, existing technologies providing boot time integrity (SecureBoot, Measured boot, vTPMs,...) will be discussed. Finally, some of the remaining gaps in various components (Linux kernel, systemd, cloud-init,...) will be highlighted. Speaker: Vitaly Kuznetsov, Track: Virtualization and Cloud Infrastructure devroom, Room: UB2.147, When: Saturday 3 February 2024, 10:30–11:00 (Brussels time), Schedule: FOSDEM 2024 event page, Slides & links Slides, Licence: Creative Commons Attribution 2.0 Belgium (CC BY 2.0 BE) (as stated in the FOSDEM video archive). Attribution: “Linux on a Confidential VM in a cloud: where's the challenge?” by Vitaly Kuznetsov, FOSDEM 2024. Original recording: 2024/ub2147/fosdem-2024-2394-linux-on-a-confidential-vm-in-a-cloud-where-s-the-challenge-.av1.webm from the FOSDEM video archive. This channel is an unofficial mirror; FOSDEM is a free and non-commercial event organised by the community for the community. Wed, 14 Oct 2026 05:03:48 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.watch Linux on a Confidential VM in a cloud: where's the challenge? https://peertube.watch/lazy-static/avatars/3b284627-b75f-409e-ac2e-10f4c2946f43.png https://peertube.watch/videos/watch/25b4a582-8526-4fc5-963f-3ad152e51b4c All rights reserved, unless otherwise specified in the terms specified at https://peertube.watch/about and potential licenses granted by each content's rightholder.