The CC (Confidential Computing) API Group is a community to accelerate the adoption of confidential computing technology in cloud environments. It serves as a central gathering place for specs, code, documentation, and ideas.

Welcome to contribute efforts for a common goal of confidential computing technology adoption!

1. Define unified and vendor agnostic APIs to collect evidences cross cloud architecture which can be found in the spec and evidence-api. Welcome to propose and define more APIs.

   

   NOTE:

   • Please get detail Confidential computing use cases for confidential virtual machine (CVM), confidential workload (CW), confidential containers (CCn), confidential cluster (CCl).
   • Confidential Container is ignored here, because it can be regarded as "Confidential VM" from the perspective of measurement and attestation. And Confidential Container is not a good and recommended deployment type for a scalable kubernetes environment due to long latency for POD startup.

2. Provide stacked measurement frameworks to gether node level evidence and container level evidence for workloads. The evidence can be used to complete remote attestation or other verification based on the business needs.

   

3. Provide easy-to-use tools and examples of building trust chain in multiple deloyment flavors of confidential computing environments.

   

   NOTE:

   • CVM Image Rewriter - Create and customize the confidential VM's qcow2 image including IMA policy, initrd, device permission etc.
   • CC Cloud Automation - Automation framework & tools which supporting diverse confidential cloud flavors like confidential VM/cluster/container/FaaS etc.

4. Provide the reference design of confidential AI/GenAI loader on model/data protections.

   

1. Create a confidential VM on Google or Azure:
   • Google GKE: N2D(AMD EPYC)/C3(Intel Sapphire Rapids)
   • Azure AKS: DCasv5/ECasv5(AMD), DCesv5/ECesv5(Intel)
2. Run cc-measure tool in CVM
3. Evaluate the node measurement log

Please refer Container Measurement Quick Start - how to prepar a CVM guest image, create a CVM and gather measurement, eventlogs for containers.

Please find more introduction to the repositories here.

• Slack - Join CC API slack channel.

• Welcome to join the community meetings. The meeting calendar and agenda can be found here.

• Evidence API Introduction
• Container Measurement Design
• Container Measurement Architecture
• Community Activities