Lift-and-shift strategy for containers in confidential computing environments
AssigneeNVIDIA Corporation
InventorMarko Zvonko KAISER
Life of this patent
Estimating the term…
Abstract
In various examples, systems and methods are disclosed relating to managing confidential containers implementing graphics processing unit (GPU) workloads are disclosed. A system can initialize a virtual machine corresponding to a confidential computing environment. The system can generate a mapping for at least one physical component interface to the virtual machine. The system can update a configuration setting(s) of a container to be executed within the virtual machine based on the mapping and a container-device interface (CDI). The system can execute the container within the confidential computing environment of the virtual machine according to the configuration setting(s).
Claims20
One or more processors comprising:
- one or more circuits to:
- initialize a virtual machine corresponding to a confidential computing environment;
- generate a mapping for at least one physical component interface to the virtual machine;
- update at least one configuration setting of a container to be executed within the virtual machine based at least on the mapping and a container-device interface (CDI);
- and
- execute the container within the confidential computing environment of the virtual machine according to the at least one configuration setting.
A system, comprising:
- one or more processors to:
- generate, during initialization of a virtual machine, a value representative of a state of the virtual machine;
- determine, using the value, that the virtual machine is executing within a confidential computing environment;
- in response to determining that the virtual machine is executing within the confidential computing environment, update at least one configuration setting of a container to be executed within the virtual machine based at least on a container-device interface (CDI);
- and
- execute the container within the confidential computing environment of the virtual machine according to the at least one configuration setting.
A method, comprising:
- initializing, using one or more processors, a virtual machine corresponding to a confidential computing environment;
- generating, using the one or more processors, a mapping for at least one physical component interface to the virtual machine;
- updating, using the one or more processors, at least one configuration setting of a container to be executed within the virtual machine based on the mapping and a container-device interface (CDI);
- and
- executing, using the one or more processors, the container within the confidential computing environment of the virtual machine according to the at least one configuration setting.
Dependencies are inferred from the claim text.