Enablement of Confidential Computing

I am working on the Confidential Containers project enabling GPUs and other accelerator on various HW TEEs. One of the first steps is to enable all the related settings in the BIOS.

Depending on the MB vendor and the TEE there are different settings to select.

The two major TEEs currently in user are AMD SEV-SNP and Intel TDX. Later Arm CCA and RISC-V CoVE.

Has anyone started to look into an unified way to enable TEEs in a vendor agnostic way?

Thanks,

  Zvonko