2023-10-30 02:20:39
In the Cloud domain, the emergence of confidential VMs (CVM) has marked a significant advance for security. It is still necessary to protect the exterior and interior. This is where the Ubuntu Pro service innovates for confidential machines hosted on Azure.
THE Confidential VMs add an extra layer of security by encrypting data while it is being processed, addressing an aspect of data protection that was previously problematic. This technology ensures that data is encrypted at runtime, at rest, and at startup.
While CVMs excel at protecting once morest external code threats, they remain susceptible to vulnerabilities within of their limits. This is where Canonical intends to play a role by ensuring a form of synergy between Ubuntu Pro and confidential VMs on Microsoft Azure.
Where the confidential virtual machine fortifies the exterior walls, Ubuntu Pro intends to vigilantly watch over the interior, thanks to a sort of reinforced enclave.
Ubuntu Pro addresses the issue by adding additional enterprise-level capabilities to Ubuntu LTS:
Extended Security Maintenance (ESM): 10 years of vulnerability management for all software.
Patching complet : Security patching for over 25,000 open-source packages, significantly reducing your average vulnerability exposure (CVE).
Kernel livepatch : To minimize downtime and unplanned reboots with fixes for critical and very severe kernel vulnerabilities.
Automated Compliance : Tool for hardening and compliance profiles, including CIS, DISA-STIG, FIPS 140, etc.
Pour deploy a new confidential VM with Ubuntu Prouse the Azure CLI command as follows:
az vm create
–resource-group “$RESOURCE_GROUP”
–name “$VM_NAME”
–size Standard_DC4as_v5
–enable-vtpm true
–image “Canonical:0001-com-ubuntu-confidential-vm-focal:20_04-lts-cvm:latest”
–security-type ConfidentialVM
–os-disk-security-encryption-type VMGuestStateOnly
–enable-secure-boot true
–license-type UBUNTU_PRO
Existing Ubuntu LTS Confidential VMs can be upgraded to Ubuntu Pro using a few commands as well, detailed here.
Billing is established on an hourly basis via the existing Azure account. For more details regarding the solution, you can consult the page dedicated to Ubuntu Pro pour Azure.
I like this :
I like loading…
Similar articles
1698633453
#Confidential #Ubuntu #Pro #Azure #whats #point
