Arm Confidential Compute Architecture is a reference software architecture that builds on the Arm architecture extension (Realm Management Extension, FEAT_RME) for Arm v9-A. This enables the execution of Confidential Virtual Machines (called Realm VMs, aka Realms), preventing access by more privileged software, such as hypervisor. The Arm CCA allows the hypervisor to manage the VM, but removes the right for access to the code, register state or data that is used by VM.
The presentation will focus on the KVM support for Arm CCA, current status, and future plans. It would also give a brief summary of the changes required to run Linux as Realm.
10 сен 2024