Attestation server and setup to deploy confidential workloads on k8s

This repository contains the setup and scripts to deploy in k8s/Openshift the various components for:

Attestation server for the encrypted image registration and confidential computing attestation using libkrun
Building the encrypted images to be used by libkrun
The tekton tasks for building the encrypted images and register the encrypted image

The picture illustrates the architecture and how the components interact between each other

For more information about the libkrun extention for SEV support reference the presentation Don't peek into my container!, the recordings and the virtee home page.

Name		Name	Last commit message	Last commit date
Latest commit History 84 Commits
build-libkrun-crun-sev		build-libkrun-crun-sev
debug-container		debug-container
demo		demo
encrypt-image		encrypt-image
generate-libkrun-measurment		generate-libkrun-measurment
k8s-deployment		k8s-deployment
pictures		pictures
register-image		register-image
verifier		verifier
.gitignore		.gitignore
Cargo.lock		Cargo.lock
Cargo.toml		Cargo.toml
Makefile		Makefile
README.md		README.md
extract-libkrunfw-from-image.sh		extract-libkrunfw-from-image.sh
register-image-locally.sh		register-image-locally.sh
start-attestation-server-locally.sh		start-attestation-server-locally.sh
start-podman-krun-sev.sh		start-podman-krun-sev.sh
test-image-registration.sh		test-image-registration.sh

Provide feedback