Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/intel/tdx-tools
Cloud Stack and Solutions for Intel TDX (Trust Domain Extension)
https://github.com/intel/tdx-tools
build confidential-computing kvm qemu tdx uefi virtualization
Last synced: 16 days ago
JSON representation
Cloud Stack and Solutions for Intel TDX (Trust Domain Extension)
- Host: GitHub
- URL: https://github.com/intel/tdx-tools
- Owner: intel
- License: apache-2.0
- Archived: true
- Created: 2021-12-02T22:27:06.000Z (over 2 years ago)
- Default Branch: tdx-mid-stream
- Last Pushed: 2024-03-27T23:30:25.000Z (3 months ago)
- Last Synced: 2024-05-09T06:34:11.042Z (about 1 month ago)
- Topics: build, confidential-computing, kvm, qemu, tdx, uefi, virtualization
- Language: Python
- Homepage:
- Size: 26.1 MB
- Stars: 187
- Watchers: 18
- Forks: 59
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
Lists
- awesome-stars - intel/tdx-tools - Cloud Stack and Solutions for Intel TDX (Trust Domain Extension) (Python)
- Awesome-SGX-Open-Source - https://github.com/intel/tdx-tools
README
PROJECT NOT UNDER ACTIVE MANAGEMENT
This project will no longer be maintained by Intel.
Intel has ceased development and contributions including, but not limited to, maintenance, bug fixes, new releases, or updates, to this project.
Intel no longer accepts patches to this project.
If you have an ongoing need to use this project, are interested in independently developing it, or would like to maintain patches for the open source software community, please create your own fork of this project.
Contact: [email protected]
# Intel® TDX (Trust Domain Extensions)
**NOTE**: The project is end of life. See more information of TDX Early Preview in [Software Availability](https://github.com/intel/tdx-tools?tab=readme-ov-file#13-software-availability).
For solutions of Intel TDX Full Disk Encryption and building Trusted Chain for Cloud Native in Confidential Computing Envrionment, please see [Unified API for Trusted Execution Environment](https://github.com/cc-api).
## 1. Overview
### 1.1 Intel® Trust Domain Extensions(TDX)
Intel® Trust Domain Extensions(TDX) refers to an Intel technology that
extends Virtual Machine Extensions(VMX) and Multi-Key Total Memory
Encryption(MK-TME) with a new kind of virtual machine guest called a Trust
Domain(TD). A TD runs in a CPU mode that protects the confidentiality of its
memory contents and its CPU state from any other software, including the hosting
Virtual Machine Monitor (VMM). Please see details at [here](https://www.intel.com/content/www/us/en/developer/tools/trust-domain-extensions/documentation.html).
### 1.2 Hardware Availability
- Azure already [launched](https://azure.microsoft.com/en-us/updates/confidential-vms-with-intel-tdx-dcesv5-ecesv5/) the
TDX based confidential computing at zone of `DCesv5` and `ECesv5` series.
- Google published [Intel Trust Domain Extensions (TDX) Security Review](https://services.google.com/fh/files/misc/intel_tdx_-_full_report_041423.pdf)
- Please contact Intel sales representative for on-premise bare metal server or processor.
### 1.3 Software Availability
_**NOTE**_: The project "Linux TDX SW Stack" is end of life. This branch only sustains tools for TDX early preview.
Please refer to Red Hat blog [Enabling hardware-backed confidential computing with a CentOS SIG](https://www.redhat.com/en/blog/enabling-hardware-backed-confidential-computing-centos-sig) or Ubuntu blog [Intel® TDX 1.0 technology preview available on Ubuntu 23.10](https://ubuntu.com/blog/intel-tdx-1-0-preview-on-ubuntu-23-10) or SUSE blog [Intel® TDX Support Coming to SUSE Linux Enterprise Server](https://www.suse.com/c/intel-tdx-support-coming-to-suse-linux-enterprise-server/) for more information of TDX Early Preview.
The corresponding git repositories are as below.
- [Cent OS](https://gitlab.com/CentOS/virt/docs/-/tree/main/docs/tdx)
- [Ubuntu](https://github.com/canonical/tdx)
- [SUSE](https://github.com/SUSE/tdx-demo/blob/main/INSTALL-SLES-15-SP5.md)
## 2. How to launch TD
Use the script [start-qemu.sh](https://github.com/intel/tdx-tools/blob/tdx-mid-stream/start-qemu.sh) to start a TD
via QEMU.
A simple usage of the script to launch TD would be as follows:
```
./start-qemu.sh -i -k
```
Or to use the guest's grub bootloader:
```
./start-qemu.sh -i -b grub
```
For more advanced configurations, please check the help menu:
```
./start-qemu.sh -h
```
Once the TD guest VM is launched, you can verify it is truly TD VM by querying `cpuinfo`. It's supposed to have tdx_guest flag.
```
cat /proc/cpuinfo | grep tdx_guest
```