Rate This Document
Findability
Accuracy
Completeness
Readability

cVMs

  • cVMs are the core feature of the TEE Kit. The CPU and memory resources for cVMs are protected by the TEE hardware.
  • The virtualization capability of the TEE Kit is implemented using libvirt, QEMU, and KVM as well as the TMM module of the TEE Kit. Therefore, customers can use cVMs in a way similar to common VMs, for example, by running libvirt or QEMU commands to configure, start, and stop cVMs.
  • cVMs can be started in GRUB or direct boot mode.
    • Direct boot indicates that the cVM is started directly in the OS without using an intermediate bootloader.
    • GRUB boot uses a UEFI bootloader to boot the cVM, allowing flexible boot management.

    For details, see "Starting VMs" in Confidential Computing TEE Kit Feature Guide.