mirror of https://github.com/aljazceru/kata-containers.git synced 2026-02-01 04:34:30 +01:00

Files

James O. D. Hunt b0a3293d53 runtime-rs: ch: Enable Intel TDX

Allow Cloud Hypervisor to create a confidential guest (a TD or
"Trust Domain") rather than a VM (Virtual Machine) on Intel systems
that provide TDX functionality.

> **Notes:**
>
> - At least currently, when built with the `tdx` feature, Cloud Hypervisor
>   cannot create a standard VM on a TDX capable system: it can only create
>   a TD. This implies that on TDX capable systems, the Kata Configuration
>   option `confidential_guest=` must be set to `true`. If it is not, Kata
>   will detect this and display the following error:
>
>   ```
>   TDX guest protection available and must be used with Cloud Hypervisor (set 'confidential_guest=true')
>   ```
>
> - This change expands the scope of the protection code, changing
>   Intel TDX specific booleans to more generic "available guest protection"
>   code that could be "none" or "TDX", or some other form of guest
>   protection.

Fixes: #6448.

Signed-off-by: James O. D. Hunt <james.o.hunt@intel.com>

2023-09-26 10:55:25 +01:00

src

runtime-rs: ch: Enable Intel TDX

2023-09-26 10:55:25 +01:00

tests

feat(runtime-rs): introduce huge page type to select VM RAM's backend

2023-09-12 11:28:27 +08:00

.gitignore

libs: enhance kata-sys-util

2022-06-10 19:55:39 +08:00

Cargo.toml

feat(runtime-rs): introduce huge page type to select VM RAM's backend

2023-09-12 11:28:27 +08:00

README.md

libs/types: add kata-types crate under src/libs

2022-06-10 18:25:24 +08:00

README.md

kata-types

This crate is a collection of constants and data types shared by multiple Kata Containers components.

It defines constants and data types used by multiple Kata Containers components. Those constants and data types may be defined by Kata Containers or by other projects/specifications, such as:

Support

Operating Systems:

Linux

License

This code is licensed under Apache-2.0.