Customized initialization code delivery over network for zero-trust virtual machine

A system comprising:

• a memory;
• and
• a processing device communicably coupled to the memory, to perform operations comprising:
• receiving a request to start a virtual machine;
• transmitting, by a processing device, configuration data of a host device over a computer network to a service, wherein the configuration data comprises a resource identifier of the host device;
• receiving hardware initialization code over the computer network from the service, wherein the hardware initialization code comprises the resource identifier;
• updating, by the processing device, the virtual machine to comprise the hardware initialization code;
• and
• causing the virtual machine to execute in a trusted execution environment of the host device, wherein the virtual machine executes the hardware initialization code and uses the resource identifier.

A non-transitory machine-readable storage medium storing instructions which, when executed, cause a processing device to perform operations comprising:

• receiving a request to start a virtual machine;
• transmitting, by a processing device, configuration data of a host device over a computer network to a service, wherein the configuration data comprises a resource identifier of the host device;
• receiving hardware initialization code over the computer network from the service, wherein the hardware initialization code comprises the resource identifier;
• updating, by the processing device, the virtual machine to comprise the hardware initialization code;
• and
• causing the virtual machine to execute in a trusted execution environment of the host device, wherein the virtual machine executes the hardware initialization code and uses the resource identifier.