cVMs
- The core function of the CCA Kit is to enable cVM functionality. All CPU and memory resources allocated for VM execution are isolated and protected at the hardware level by CCA. In addition, memory encryption is supported to defend against physical memory attacks.
- The virtualization capability of the CCA Kit is jointly implemented using libvirt, QEMU, and KVM as well as the RMM provided by CCA Kit. Therefore, the experience of using cVMs is consistent with that of common VMs. You can use libvirt or QEMU commands to manage VM configurations, startup, and shutdown operations. The realm memory allocation can be dynamically adjusted after the host system boots, without being limited by a fixed memory size.
- cVMs support two boot modes: GRUB boot and direct boot.
- Direct boot means that the cVM boots directly into the OS without using an intermediate bootloader.
- GRUB boot uses a UEFI bootloader to boot the cVM, allowing flexible boot management.
For details, see descriptions about VM startup in the Confidential Computing CCA Kit Feature Guide.
Parent topic: Key Features