BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

A library OS for Linux multi-process applications, with Intel SGX support

A novel container runtime, aka confidential container, for cloud-native confidential computing and enclave runtime ecosystem.

Keystone Enclave (QEMU + HiFive Unleashed)

Trust Domain Extensions (TDX) is introducing new, architectural elements to help deploy hardware-isolated, virtual machines (VMs) called trust domains (TDs). Intel TDX is designed to isolate VMs fr…