> On Wed, 2023-04-26 at 13:32 +0000, Reshetova, Elena wrote: > > > On Mon, Mar 27, 2023, Carlos Bilbao wrote: > [...] > > > > +provide stronger security guarantees to their clients (usually > > > > referred to +as tenants) by excluding all the CSP's > > > > infrastructure and SW out of the +tenant's Trusted Computing Base > > > > (TCB). > > > > > > This is inaccurate, the provider may still have software and/or > > > hardware in the TCB. > > > > Well, this is the end goal where we want to be, the practical > > deployment can differ of course. We can rephrase that it "allows to > > exclude all the CSP's infrastructure and SW out of tenant's TCB." > > That's getting even more inaccurate. To run in a Cloud with CoCo you > usually have to insert some provided code, like OVMF and, for AMD, the > SVSM. These are often customized by the CSP to suit the cloud > infrastructure, so you're running their code. Agree, this *can be the case in practice*, but it doesn’t have to be one. Nothing from the CoCo technology itself prevents tenants in this model to have their own virtual FW. The fact that CSPs infrastructure might not support this case is a totally different story. The goal, I think, is to > make sure you only run code you trust (some of which may come from the > CSP) in your TCB, which is very different from the statement above. At the end it would go down to the agreement between a CSP and tenant, i.e. how much tenants are willing to trust CSP and how much of CSPs code they would take into their TCB (using proper means of establishing a trust in these pieces). This agreement is our of anyone control here and the only thing that the CoCo technologies are aiming to provide is to enable all these different models/agreements, including the ultimate case (if wanted) when tenants could run without any CSP components in their TCB. So, let’s fix the wording in the document that it is indeed doesn’t rule out any of the agreements styles, but the goal of this document is not to describe CoCo use cases, but to talk about what Linux kernel needs to do assuming there are tenants who want to make sure they run kernel inside a CoCo VM that is ready to take the new threat model into account. Best Regards, Elena.
