Encryption and remote attestation of containers

A system comprising:

• a processor;
• and
• a first memory storing instructions which, when executed by the processor, cause the processor to:
• transmit, to an application node of a cloud computing environment, a request to create a virtual machine at the application node, the request containing encryption parameters for use in encrypting the virtual machine;
• receive, from the application node, an attestation indicating that the virtual machine has been created and encrypted at least in part;
• validate the attestation;
• generate a first encryption key;
• transmit the first encryption key to the application node;
• and
• transmit, to the virtual machine, an encrypted container image for execution within the virtual machine.

A non-transitory, computer-readable medium storing instructions which, when executed by a processor, cause the processor to:

• transmit, to an application node of a cloud computing environment, a request to create a virtual machine at the application node, the request containing encryption parameters for use in encrypting the virtual machine;
• receive, from the application node, an attestation indicating that the virtual machine has been created and encrypted at least in part;
• validate the attestation;
• generate a first encryption key;
• transmit the first encryption key to the application node;
• and
• transmit, to the virtual machine, an encrypted container image for execution within the virtual machine.