Whitepaper: Linux* Stacks for Intel® Trust Domain Extension 1.0

Description

Linux* Stacks for Intel® TDX is an end-to-end hypervisor cloud stack including the Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) components to produce the following minimal use cases:

·      Launch Intel® TDX guest VM to run general computing workloads

·      Do launch-time measurement within the Intel® TDX guest VM

·      Do runtime attestation with the quote generated by Intel® Software Guard Extensions (Intel® SGX)-based quote generation service (QGS) on the IaaS host

The open-source code for Linux Stack for Intel TDX can be found at https://github.com/intel/tdx-tools.

This document introduces:

·      The deployment, cloud stack test, and other common uses for those who want to validate confidential workloads or tune performance.

·      The debug and development methods for those who want to integrate stack for their IaaS/PaaS framework.