Technologies for hybrid virtualization and secure enclave policy enforcement for edge orchestration

A method for secure virtualization, the method comprising:

• requesting, by a platform services enclave of a computing device, a local attestation report from an application enclave of the computing device;
• generating, by the application enclave, an attestation report using secure enclave support of a processor of the computing device, wherein the attestation report is indicative of a virtualization context of the application enclave, wherein the virtualization context is provided by virtualization support of the processor;
• and
• enforcing, by the platform services enclave, a container-enclave policy based on the virtualization context of the application enclave.

One or more computer-readable storage media comprising a plurality of instructions stored thereon that, after being prepared for execution, cause a computing device that executes the prepared instructions to:

• request, by a platform services enclave of the computing device, a local attestation report from an application enclave of the computing device;
• generate, by the application enclave, an attestation report using secure enclave support of a processor of the computing device, wherein the attestation report is indicative of a virtualization context of the application enclave, wherein the virtualization context is provided by virtualization support of the processor;
• and
• enforce, by the platform services enclave, a container-enclave policy based on the virtualization context of the application enclave.