Linux Prepares For More Code Sharing Between AMD SEV + Intel TDX

[phoronix]

Phoronix: Linux Prepares For More Code Sharing Between AMD SEV + Intel TDX

Coming with future Intel CPUs is Trust Domain Extensions (TDX) to further enhance the security of virtual machines (VMs) and it's sounded a lot like AMD's Secure Encrypted Virtualization (SEV) in many regards and in fact now for the Linux kernel Intel is looking at leveraging some of that SEV code to allow for more code sharing between these CPU features to improve virtualization security...

https://www.phoronix.com/scan.php?page=news_item&px=Linux-SEV-TDX-Code-Sharing

[deusexmachina]

Such a LARP on AMD's part. Do any hosting companies or clouds actually have SME & SEV enabled? Except for GCE?

[JustRob]

... Do any hosting companies or clouds actually have SME & SEV enabled? Except for GCE?

Yes. A few hits can be found by searching for: "Confidential Container" Cloud AMD

Alibaba Cloud: https://www.alibabacloud.com/blog/wh...ntainer_597363
IBM Cloud: https://www.ibm.com/cloud/amd
Microsoft Azure: https://azure.microsoft.com/en-us/bl...ial-computing/

[CommunityMember]

Yes ....

I would be surprised if the two top-secret AWS regions are not working through their certification(s) for such usage, along with the gov cloud regions.

[deusexmachina]

Yes. A few hits can be found by searching for: "Confidential Container" Cloud AMD

Alibaba Cloud: https://www.alibabacloud.com/blog/wh...ntainer_597363
IBM Cloud: https://www.ibm.com/cloud/amd
Microsoft Azure: https://azure.microsoft.com/en-us/bl...ial-computing/

Ya but these aren't public cloud, are they? Yes, they'll give you dedicated servers and you can setup guest VMs on SEV & SME enabled systems. But are there any clouds where you can launch VMs that are already SME & SEV enabled?