Skip to content
@confidential-containers

Confidential Containers

logo

CII Best Practices

Welcome to Confidential Containers

Confidential Containers is an open source community working to enable cloud native confidential computing by leveraging Trusted Execution Environments to protect containers and data.

Goals:

  • Allow cloud native application owners to enforce application security requirements
  • Transparent deployment of unmodified containers
  • Support for multiple TEE and hardware platforms
  • A trust model which separates Cloud Service Providers (CSPs) from guest applications
  • Least privilege principles for the Kubernetes Cluster administration capabilities which impact delivering Confidential Computing for guest application or data inside the TEE.

Find out more

Get started

Join the community


cncf-logo

Confidential Containers is a Cloud Native Computing Foundation sandbox project.

Pinned Loading

  1. confidential-containers confidential-containers Public

    Confidential Containers Community

    D2 399 85

  2. operator operator Public archive

    Operator to deploy confidential containers runtime

    Go 153 72

  3. guest-components guest-components Public

    Confidential Containers Guest Tools and Components

    Rust 134 189

  4. cloud-api-adaptor cloud-api-adaptor Public

    Ability to create Kata pods using cloud provider APIs aka the peer-pods approach

    Go 85 158

  5. trustee trustee Public

    Attestation and Secret Delivery Components

    Rust 186 181

  6. enclave-cc enclave-cc Public archive

    Process-based Confidential Container Runtime

    Go 84 43

Repositories

Showing 10 of 26 repositories
  • trustee Public

    Attestation and Secret Delivery Components

    confidential-containers/trustee's past year of commit activity
    Rust 186 Apache-2.0 181 106 29 Updated Sep 17, 2026
  • confidentialcontainers.org Public

    Confidential Containers website

    confidential-containers/confidentialcontainers.org's past year of commit activity
    SCSS 5 Apache-2.0 43 16 8 Updated Sep 16, 2026
  • guest-components Public

    Confidential Containers Guest Tools and Components

    confidential-containers/guest-components's past year of commit activity
    Rust 134 Apache-2.0 189 70 31 Updated Sep 16, 2026
  • cloud-api-adaptor Public

    Ability to create Kata pods using cloud provider APIs aka the peer-pods approach

    confidential-containers/cloud-api-adaptor's past year of commit activity
    Go 85 Apache-2.0 158 189 (5 issues need help) 28 Updated Sep 16, 2026
  • td-shim Public

    Confidential Containers Shim Firmware

    confidential-containers/td-shim's past year of commit activity
    Rust 130 73 32 14 Updated Sep 14, 2026
  • trustee-operator Public

    Operator to manage the lifecycle of Trustee (KBS)

    confidential-containers/trustee-operator's past year of commit activity
    Go 16 Apache-2.0 35 9 6 Updated Sep 9, 2026
  • charts Public

    The place for all helm charts related to Confidential Containers

    confidential-containers/charts's past year of commit activity
    Shell 16 Apache-2.0 14 120 1 Updated Sep 3, 2026
  • confidential-containers Public

    Confidential Containers Community

    confidential-containers/confidential-containers's past year of commit activity
    D2 399 Apache-2.0 85 48 (1 issue needs help) 3 Updated Aug 27, 2026
  • simple-kbs Public archive

    Key Broker Server for SEV(-ES)

    confidential-containers/simple-kbs's past year of commit activity
    Rust 16 Apache-2.0 14 7 0 Updated Aug 7, 2026
  • reference-values Public

    Confidential Containers Community Official Version Reference Value Release Repository

    confidential-containers/reference-values's past year of commit activity
    Python 1 Apache-2.0 1 4 1 Updated Jul 30, 2026

Most used topics

Loading…