Skip to content

Instantly share code, notes, and snippets.

@zed-wong
Last active April 3, 2025 10:36
Show Gist options
  • Save zed-wong/cd4a4f41b83e8a3aa9b3a2a31e0b0f7d to your computer and use it in GitHub Desktop.
Save zed-wong/cd4a4f41b83e8a3aa9b3a2a31e0b0f7d to your computer and use it in GitHub Desktop.
tee-docs.md

How to deploy confidential containers on bare metal: https://developers.redhat.com/articles/2025/02/19/how-deploy-confidential-containers-bare-metal#helper_script_for_deploying_confidential_containers_

Intel® Trust Domain Extensions (Intel® TDX): https://www.intel.com/content/www/us/en/developer/tools/trust-domain-extensions/overview.html

An Introduction to Basic Confidential Containers Computing demo: https://www.youtube.com/watch?v=rhPraqkttdM

Centos TDX: https://sigs.centos.org/virt/tdx/

Deploy confidential computing with Intel® TDX and Ubuntu 24.04 today: https://ubuntu.com/blog/deploy-confidential-computing-intel-tdx-ubuntu-2404

Start your Ubuntu Confidential VM with Intel® TDX on Google Cloud: https://canonical.com/blog/start-your-ubuntu-confidential-vm-with-intel-tdx-on-google-cloud

SGX hardware: https://github.com/ayeks/SGX-hardware?tab=readme-ov-file

Intel/confidential-computing-zoo: https://github.com/intel/confidential-computing-zoo

An Experimental Evaluation of TEE technology Evolution: Benchmarking Transparent Approaches based on SGX, SEV, and TDX : https://arxiv.org/html/2408.00443v1

[Literature Review] An Experimental Evaluation of TEE technology Evolution: Benchmarking Transparent Approaches based on SGX, SEV, and TDX : https://www.themoonlight.io/en/review/an-experimental-evaluation-of-tee-technology-evolution-benchmarking-transparent-approaches-based-on-sgx-sev-and-tdx

The Flawed Design of Intel TDX: https://x86.lol/generic/2023/02/07/intel-tdx.html

Create TDX compute on Azure: https://www.youtube.com/watch?v=oqWSSS7ml44

tdx-attestation-sdk: https://github.com/automata-network/tdx-attestation-sdk/tree/main/tdx

azure-sdk-for-rust: https://github.com/azure/azure-sdk-for-rust

microsoft-azure-attestation: https://github.com/Azure-Samples/microsoft-azure-attestation

Azure CVM Tooling (Azure AMD SEV-SNP and Intel TDX): https://github.com/kinvolk/azure-cvm-tooling

verify quote : https://github.com/fleek-network/sgx-quote-verify-js

Single executable applications: https://nodejs.org/api/single-executable-applications.html#generating-single-executable-preparation-blobs


image


Cloud platforms that supports TDX

  1. Alibaba Cloud
  2. Intel Developer Cloud
  3. Microsoft Azure
  4. Google Cloud
  5. IBM Cloud (specifically in the Washington DC region)
  6. ServerMania
  7. OpenMetal

Platform Technology Instance Type vCPUs RAM (GB) Hourly Cost (USD) Monthly Cost (USD) Notes
Azure Intel SGX (DCsv2) DC1s_v2 1 4 $0.10 $73.00 No premium for SGX (https://learn.microsoft.com/en-us/azure/confidential-computing/quick-create-portal)
Azure Intel TDX (DCesv5) DC4es_v5 4 16 $0.208 $151.84 Preview pricing
AWS Nitro Enclaves c6g.xlarge 4 8 $0.170 $124.10 No extra cost for enclaves
AWS Nitro Enclaves m5.2xlarge 8 32 $0.384 $280.32
GCP Intel TDX n2d-standard-4 4 16 $0.214* $156.22* Includes 23% confidential premium
GCP AMD SEV n2d-standard-8 8 32 $0.403* $294.19* Includes 59% confidential premium
Alibaba Intel SGX ecs.g7t.large 2 8 ¥0.64575 ¥465 Regional discounts available (APAC focus) (https://help.aliyun.com/zh/ecs/user-guide/build-an-sgx-encrypted-computing-environment?spm=a2c4g.11186623.help-menu-25365.d_4_1_8_2_0.7c7e74d234n5IA&scm=20140722.H_208095._.OR_help-T_cn~zh-V_1)
Alibaba Intel TDX ecs.g8i.xlarge 4 16 ¥1.0885 ¥783.72 Regional discounts available (APAC focus) (https://help.aliyun.com/zh/ecs/user-guide/build-a-tdx-confidential-computing-environment?spm=a2c4g.11186623.help-menu-25365.d_4_1_8_2_1.52b339b7IqTcEo&scm=20140722.H_479090._.OR_help-T_cn~zh-V_1)
ByteDance Cloud Intel SGX ecs.ebmg2t.32xlarge
Tencent Cloud Intel SGX M6ce.4XLARGE128
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment