Towards Enclave-as-a-Container with Inclavare containers and Occlum
Channel: OpenInfra Foundation
Date: 2020-10-28

Special thanks to our 2020 Open Infrastructure Summit sponsors for making the event possible: Canonical (Ubuntu), Huawei, VEXXHOST, Cisco, Tencent Cloud, InMotion Hosting, Mirantis, Red Hat, Trilio, VanillaStack.io, and ZTE!
--

While containers offer many benefits, they suffer from one major drawback: weak isolation. Security-enhanced implementation (e.g., Kata and Gvisor) does exist, but it still has to put trust in hypervisors and OSes.

Inclavare Containers is  an enclave-based, OCI-compliant runtime, and Occlum is a memory-safe enclave OS. These two open source projects aim to bring  confidential computing into the cloud native ecosystem.

The speakers will give a technical overview of the two projects, and share their experience in building and deploying real-world enclave-as-a-container services.

Speakers: yuntong jin, Hongliang Tian, tianjia zhang
Track: Security