Anybody use Confidential Computing technology?
reddit / selfhosted

----------------------------------------------------------------------
MindRepresentative59 · 2023-11-02 17:46

Looking for anyone the uses Amd SEV or intel TDX to increase VM
security.  This will influence my processor choice on next server.

----------------------------------------------------------------------
jonahbenton · 2023-11-02 18:00

SGX, did some work with Conclave. Very cool but complicated. Need to
have a usecase that involves a trust dynamic that is ergonomic to the
tech.

----------------------------------------------------------------------
j0nathanr · 2023-11-02 18:02

I've looked into VMware's support for AMD SEV briefly, and what I
found wasn't so encouraging. Per VMware's documentation a whole bunch
of features are unavailable with SEV enabled, including UEFI secure
boot. I'm not sure if Proxmox has the same behavior, I suppose it's
worth looking into. For homelab purposes however, I feel like
encrypting your hypervisor's drives with a TPM device and locking the
bios is secure enough.

----------------------------------------------------------------------
MindRepresentative59 · 2023-11-02 18:17

Thanks

----------------------------------------------------------------------
MindRepresentative59 · 2023-11-02 18:18

Thanjs

----------------------------------------------------------------------
MindRepresentative59 · 2023-11-02 19:05

Thanks

----------------------------------------------------------------------
AnomalyNexus · 2023-11-02 22:46

I'd struggle to justify a CPU choice based on this.

Confidential computing is aimed at guest not trusting host. And if as
selfhoster you've lost trust in the host that's game over in my books.

So I'd rather take the CPU that performs 1% better but doesn't have
confidential compute.

i.e. This makes sense in cloud but not home to me