Whitepaper: Linux* Stacks for Intel® Trust Domain Extensions 1.5

Description

Linux* Stacks for Intel® TDX 1.5 is an end-to-end hypervisor cloud stack that includes Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) components to produce the following minimal use cases:

·      Launch Intel® TDX guest VM to run general computing workloads.

·      Do launch-time measurement within the Intel® TDX guest VM.

·      Do runtime attestation with the quote generated by Intel® Software Guard Extensions (Intel® SGX)-based quote generation service (QGS) on the IaaS host.

·      Support TD live migration to migrate a running TD from source platform to destination platform.

·      Support TD preserving which allows an existing TD to keep running unmodified after a TDX module update.

·      Support vTPM solution which provides a virtual TPM 2.0 compliant device for TDVM. It works with tpm2-tools, IMA and Keylime.