Azure MarbleRun deployment

Azure Kubernetes Services (AKS)

Azure Kubernetes Service (AKS) offers a popular deployment technique relying on Azure's cloud resources. AKS hosts Kubernetes pods in SGX-capabale Azure VMs and exposes the underlying SGX hardware.

Prerequisites

• Follow the instructions on the AKS Confidential Computing Quick Start guide to provision an AKS cluster with Intel SGX enabled worker nodes.

Deploy MarbleRun

See our Kubernetes guide on how to install MarbleRun in your AKS cluster.

Azure confidential computing VMs

Azure confidential computing services provide access to VMs with Intel SGX enabled. You can follow their quickstart to create a DCsv2 (Coffee Lake) or DCsv3 (Ice Lake) VM.

Prerequisites

• Update and install EGo
• Update and install the Azure DCAP client

Deploy MarbleRun

You can run MarbleRun standalone on your Azure DCsv2/3 VM, see our standalone guide. Alternatively, you can install a Kubernetes cluster, probably the simplest option would be minikube, see our Kubernetes guide on how to install MarbleRun in minikube.