cVMs
- cVMs are the core feature of the TEE Kit. The CPU and memory resources for cVMs are protected by the TEE hardware.
- The virtualization capability of the TEE Kit is implemented using libvirt, QEMU, and KVM as well as the TMM module of the TEE Kit. Therefore, customers can use cVMs in a way similar to common VMs, for example, by running libvirt or QEMU commands to configure, start, and stop cVMs.
- cVMs can be started in GRUB or direct boot mode.
- Direct boot indicates that the cVM is started directly in the OS without using an intermediate bootloader.
- GRUB boot uses a UEFI bootloader to boot the cVM, allowing flexible boot management.
For details, see "Starting VMs" in Confidential Computing TEE Kit Feature Guide.
Parent topic: Key Features