Skip to content
@confidential-containers

Confidential Containers

logo

CII Best Practices

Welcome to Confidential Containers

Confidential Containers is an open source community working to enable cloud native confidential computing by leveraging Trusted Execution Environments to protect containers and data.

Goals:

  • Allow cloud native application owners to enforce application security requirements
  • Transparent deployment of unmodified containers
  • Support for multiple TEE and hardware platforms
  • A trust model which separates Cloud Service Providers (CSPs) from guest applications
  • Least privilege principles for the Kubernetes Cluster administration capabilities which impact delivering Confidential Computing for guest application or data inside the TEE.

Find out more

Get started

Join the community


cncf-logo

Confidential Containers is a Cloud Native Computing Foundation sandbox project.

Pinned Loading

  1. confidential-containers confidential-containers Public

    Confidential Containers Community

    276 59

  2. operator operator Public

    Operator to deploy confidential containers runtime

    Go 142 69

  3. guest-components guest-components Public

    Confidential Containers Guest Tools and Components

    Rust 102 111

  4. cloud-api-adaptor cloud-api-adaptor Public

    Ability to create Kata pods using cloud provider APIs aka the peer-pods approach

    Go 56 106

  5. trustee trustee Public

    Attestation and Secret Delivery Components

    Rust 96 116

  6. enclave-cc enclave-cc Public

    Process-based Confidential Container Runtime

    Go 83 40

Repositories

Showing 10 of 22 repositories
  • trustee Public

    Attestation and Secret Delivery Components

    confidential-containers/trustee’s past year of commit activity
    Rust 96 Apache-2.0 116 86 20 Updated Jul 2, 2025
  • guest-components Public

    Confidential Containers Guest Tools and Components

    confidential-containers/guest-components’s past year of commit activity
    Rust 102 Apache-2.0 111 67 20 Updated Jul 2, 2025
  • cloud-api-adaptor Public

    Ability to create Kata pods using cloud provider APIs aka the peer-pods approach

    confidential-containers/cloud-api-adaptor’s past year of commit activity
    Go 56 Apache-2.0 106 186 (8 issues need help) 13 Updated Jul 1, 2025
  • operator Public

    Operator to deploy confidential containers runtime

    confidential-containers/operator’s past year of commit activity
    Go 142 Apache-2.0 69 59 (3 issues need help) 6 Updated Jul 1, 2025
  • trustee-operator Public

    Operator to manage the lifecycle of Trustee (KBS)

    confidential-containers/trustee-operator’s past year of commit activity
    Go 9 Apache-2.0 21 7 1 Updated Jun 30, 2025
  • td-shim Public

    Confidential Containers Shim Firmware

    confidential-containers/td-shim’s past year of commit activity
    Rust 111 61 32 11 Updated Jun 17, 2025
  • confidentialcontainers.org Public

    Confidential Containers website

    confidential-containers/confidentialcontainers.org’s past year of commit activity
    SCSS 5 Apache-2.0 19 17 2 Updated Jun 2, 2025
  • confidential-containers Public

    Confidential Containers Community

    confidential-containers/confidential-containers’s past year of commit activity
    276 Apache-2.0 59 101 (1 issue needs help) 5 Updated May 23, 2025
  • enclave-cc Public

    Process-based Confidential Container Runtime

    confidential-containers/enclave-cc’s past year of commit activity
    Go 83 Apache-2.0 40 21 6 Updated Apr 7, 2025
  • confidential-containers.github.io Public

    Confidential Containers CI Dashboard

    confidential-containers/confidential-containers.github.io’s past year of commit activity
    HTML 0 0 0 0 Updated Feb 11, 2025

Top languages

Loading…

Most used topics

Loading…