Hi, the organizers of the Linux Plumbers Conference 2022 have recently opened the CfP for microconferences and I thought it would be great to have another Confidential Computing microconference to bring everyone together and discuss open problems.
I drafted a proposal for review, feel free to make improvements and/or add more topics. Please also forward this email to other people who might be interested, but which I missed here. If anyone is interested in co-organizing this microconference, please contact me. I am open to any helping hand :) I plan to submit the proposal to the LPC website end of next week to get things going. Thanks, Joerg Here is the current proposal text: Confidential Computing Microconference ====================================== Last years inaugural Confidential Computing microconference brought together plumbers enabling secure execution features in hypervisors, firmware, Linux Kernel, over low-level user space up to container runtimes. Good progress was made on a couple of topics, most outstanding here is the development of Linux guest support for Intel TDX[1] and AMD SEV-SNP[2]. The patch-sets for both are under intensive review and come close to be merged upstream. The discussions in the microconference also helped to move other topics forward, such as support for un-accepted memory[3] or deferred memory pinning[4] for confidential guests. But enabling Confidential Computing in the Linux ecosystem is an ongoing process, and there are still many problems to solve. The most important ones are: * Design and implementation of Intel TDX and AMD SEV-SNP host support * Linux kernel memory management changes for secure execution environments * Support of upcoming secure execution hardware extensions from ARM and RISC-V * Pre-launch and runtime attestation workflows * Interrupt security for AMD SEV-SNP * Debuggability and live migration of encrypted virtual machines * Proper testing of confidential computing support code The Confidential Computing Microconference wants to bring together plumbers working on secure execution features to discuss these and other open problems. [1] https://lore.kernel.org/all/20220124150215.36893-1-kirill.shute...@linux.intel.com/ [2] https://lore.kernel.org/all/20220209181039.1262882-1-brijesh.si...@amd.com/ [3] https://lore.kernel.org/all/20220128205906.27503-1-kirill.shute...@linux.intel.com/ [4] https://lore.kernel.org/all/20220118110621.62462-1-nik...@amd.com/ Key Attendees: * Andi Kleen <a...@linux.intel.com> * Andy Lutomirski <l...@kernel.org> * Borislav Petkov <b...@alien8.de> * Brijesh Singh <brijesh.si...@amd.com> * Dr. David Alan Gilbert <dgilb...@redhat.com> * Dave Hansen <dave.han...@linux.intel.com> * David Hildenbrand <da...@redhat.com> * David Kaplan <david.kap...@amd.com> * David Rientjes <rient...@google.com> * Joerg Roedel <jroe...@suse.de> * Jun Nakajima <jun.nakaj...@intel.com> * Kirill A. Shutemov <kirill.shute...@linux.intel.com> * Marc Orr <marc...@google.com> * Mike Rapoport <r...@kernel.org> * Paolo Bonzini <pbonz...@redhat.com> * Peter Gonda <pgo...@google.com> * Sathya Kuppuswamy <sathyanarayanan.kuppusw...@intel.com> * Sean Christopherson <sea...@google.com> * Tom Lendacky <thomas.lenda...@amd.com> _______________________________________________ Virtualization mailing list Virtualization@lists.linux-foundation.org https://lists.linuxfoundation.org/mailman/listinfo/virtualization