Nesting Secure VM Hosts - Exploring Benefits and Drawbacks

Nesting Secure VM Hosts - Exploring Benefits and Drawbacks

Explore the concept of nesting secure VM hosts in this 16-minute conference talk by Janosch Frank from IBM. Delve into the benefits and drawbacks of this approach, as nesting secure VMs themselves remains impractical due to costly hardware requirements. Learn how KVM can emulate secure VM firmware to host secure VMs by utilizing secure firmware component APIs. Examine technical details with a focus on s390 architecture, while considering the potential for this feature to expand to other architectures in the future.