Skip to content
@confidential-containers

Confidential Containers

logo

CII Best Practices

Welcome to Confidential Containers

Confidential Containers is an open source community working to enable cloud native confidential computing by leveraging Trusted Execution Environments to protect containers and data.

Goals:

  • Allow cloud native application owners to enforce application security requirements
  • Transparent deployment of unmodified containers
  • Support for multiple TEE and hardware platforms
  • A trust model which separates Cloud Service Providers (CSPs) from guest applications
  • Least privilege principles for the Kubernetes Cluster administration capabilities which impact delivering Confidential Computing for guest application or data inside the TEE.

Find out more

Get started

Join the community


cncf-logo

Confidential Containers is a Cloud Native Computing Foundation sandbox project.

Pinned Loading

  1. confidential-containers confidential-containers Public

    Confidential Containers Community

    316 71

  2. operator operator Public

    Operator to deploy confidential containers runtime

    Go 150 72

  3. guest-components guest-components Public

    Confidential Containers Guest Tools and Components

    Rust 110 142

  4. cloud-api-adaptor cloud-api-adaptor Public

    Ability to create Kata pods using cloud provider APIs aka the peer-pods approach

    Go 64 121

  5. trustee trustee Public

    Attestation and Secret Delivery Components

    Rust 127 139

  6. enclave-cc enclave-cc Public

    Process-based Confidential Container Runtime

    Go 86 42

Repositories

Showing 10 of 24 repositories
  • guest-components Public

    Confidential Containers Guest Tools and Components

    confidential-containers/guest-components’s past year of commit activity
    Rust 110 Apache-2.0 142 50 (1 issue needs help) 18 Updated Jan 6, 2026
  • cloud-api-adaptor Public

    Ability to create Kata pods using cloud provider APIs aka the peer-pods approach

    confidential-containers/cloud-api-adaptor’s past year of commit activity
    Go 64 Apache-2.0 121 204 (8 issues need help) 34 Updated Jan 5, 2026
  • trustee Public

    Attestation and Secret Delivery Components

    confidential-containers/trustee’s past year of commit activity
    Rust 127 Apache-2.0 139 74 20 Updated Jan 5, 2026
  • td-shim Public

    Confidential Containers Shim Firmware

    confidential-containers/td-shim’s past year of commit activity
    Rust 115 68 31 13 Updated Jan 5, 2026
  • operator Public

    Operator to deploy confidential containers runtime

    confidential-containers/operator’s past year of commit activity
    Go 150 Apache-2.0 72 58 (3 issues need help) 7 Updated Jan 1, 2026
  • confidentialcontainers.org Public

    Confidential Containers website

    confidential-containers/confidentialcontainers.org’s past year of commit activity
    SCSS 5 Apache-2.0 22 15 2 Updated Dec 17, 2025
  • qemu Public Forked from qemu/qemu

    Official QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website.

    confidential-containers/qemu’s past year of commit activity
    C 0 6,544 0 0 Updated Dec 17, 2025
  • charts Public

    The place for all helm charts related to Confidential Containers

    confidential-containers/charts’s past year of commit activity
    Shell 1 Apache-2.0 3 2 0 Updated Dec 13, 2025
  • confidential-containers Public

    Confidential Containers Community

    confidential-containers/confidential-containers’s past year of commit activity
    316 Apache-2.0 71 42 (1 issue needs help) 4 Updated Dec 9, 2025
  • amdese-amdsev Public Forked from AMDESE/AMDSEV

    AMD Secure Encrypted Virtualization

    confidential-containers/amdese-amdsev’s past year of commit activity
    Shell 0 103 0 1 Updated Nov 20, 2025

Most used topics

Loading…