Speaker
Description
Live migration and runtime attestation are two critical features for Confidential Computing to get right, not just in terms of fulfilling customer requirements, but also correct integration into common Linux codebase and overall code simplicity and maintainability. Based on Linux community feedback, TDX architecture went through a few big changes last year wrt to Live Migration and Attestation to enable simpler Linux integration.
In this short talk we will share the key changes, as well as our key learnings in this area that could be useful for other architectures enabling these confidential computing features in Linux. We would also like to hear feedback from the community on other areas where such simplifications can make a great difference.