Inclavare Containers Roadmap

This document provides the roadmap of Inclavare Containers project.

v0.5.0: Initial K8s confidential computing cluster
v1.0.0: Full function of K8s confidential computing cluster

rune

(0.5.0) Code refactoring for minimizing the dependency on libcontainer.
(0.7.0) Leave this CLI to using docker.

shim-rune

(0.9.0) Integrate libenclave and libcontainer.

Enclave Runtimes

Support more enclave runtimes such as Graphene(0.7.0), WAMR(0.5.0), sgx-lkl(0.8.0), enarx(0.9.0), openenclave(1.0.0) and so on.
(0.8.0) Provide a reference Enclave OS for confidential VM.

Enclave Pooling Manager

(0.5.0) Implement bundle cache and enclave pooling for dramatically speeding up enclave launch time.

shelter

(0.7.0) kubectl plugin for confidential K8s management.

shelterd

(0.8.0) Daemon server for shelter clients.

inclavared & stub enclave

(0.7.0) Implement general attestation service and infrastructure for confidential Kubernetes.