KVM Courses and Certifications

KVM Forum

Attesting Confidential Devices and Provisioning Secure Workload Identities with Trustee

Discover Trustee's latest developments in confidential computing: attestation for CVMs with devices like NVIDIA H100 and secure identity provisioning for confidential guests.

• YouTube
• 28 minutes
• On-Demand
• Free Video

KVM Forum

Towards Reliable Timekeeping in COCONUT-SVSM

Explore SecureTSC integration and KVM clock solutions to establish reliable, monotonic timekeeping in COCONUT-SVSM for trusted services in SEV-SNP guests.

• YouTube
• 25 minutes
• On-Demand
• Free Video

KVM Forum

guest_memfd - Unmapped Potential

Explore guest_memfd's evolution from specialized confidential computing tool to universal KVM guest memory API with enhanced mapping capabilities and in-place conversion support.

• YouTube
• 13 minutes
• On-Demand
• Free Video

KVM Forum

Libkrun Meets ARM Confidential Computing Architecture - No Hardware Required for Now

Explore ARM Confidential Computing Architecture integration with libkrun, a Rust-based VM monitor, featuring encrypted memory, secure isolation, and FVP simulator development.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Kernel Recipes

Linux Virtualization Based Security - Hypervisor-Agnostic Kernel Protection Architecture

Discover Linux Virtualization Based Security (LVBS) - a hypervisor-agnostic architecture that strengthens kernel protection beyond built-in defenses using hypervisor-level enforcement.

• YouTube
• 32 minutes
• On-Demand
• Free Video

KVM Forum

Practical and Efficient Out-of-Process Storage Backends

Explore out-of-process storage backends for VMs, comparing options like qemu-storage-daemon. Analyze performance characteristics and future optimizations for efficient storage solutions.

• YouTube
• 30 minutes
• On-Demand
• Free Video

KVM Forum

Securing Interrupt Delivery for SEV-SNP Guests

Explore SEV-SNP's Alternate Injection feature for securing interrupt delivery in virtual machines, using SVSM and APIC emulation to protect against malicious hypervisor attacks.

• YouTube
• 25 minutes
• On-Demand
• Free Video

KVM Forum

The Road to Optimal CPU Virtualization on Hybrid Platforms

Explore optimal CPU virtualization on hybrid platforms. Learn about QEMU API design, hybrid CPU/cache topology for guests, and VM performance optimization methods for hybrid vCPUs.

• YouTube
• 26 minutes
• On-Demand
• Free Video

KVM Forum

Automated Hypervisor Testing and Benchmarking on Hardware

Explore challenges and solutions in automated testing for virtualization workloads on diverse hardware, covering remote control, workflow integration, optimization, and performance benchmarking.

• YouTube
• 29 minutes
• On-Demand
• Free Video

KVM Forum

UserfaultFD-based Memory Overcommitment for VM Performance Optimization

Explore a custom memory manager for VM memory using UserfaultFD, improving overcommitment and live migration performance. Learn about design, implementation, and potential optimizations for virtualization environments.

• YouTube
• 32 minutes
• On-Demand
• Free Video

Linux Plumbers Conference

Secure Interrupt Delivery - Lessons Learned from Alternate Injection Enablement

Explore SEV-SNP Alternate Injection security mechanisms, SVSM APIC emulation, KVM bypass techniques, and VMPL switches for protecting guests from malicious interrupt attacks.

• YouTube
• 17 minutes
• On-Demand
• Free Video

kvmtool - A Lean QEMU Alternative for KVM Virtual Machines

Explore kvmtool as a lightweight alternative to QEMU for KVM virtual machines. Learn its advantages, usage, and potential for production scenarios, with insights on resource efficiency and future developments.

• YouTube
• 54 minutes
• On-Demand
• Free Video

linux.conf.au

Taking it to the Next Level - Nested KVM on the POWER9 Processor

Explore nested virtualization on POWER9 processors, including KVM implementation, challenges, and future developments. Gain insights into running VMs within VMs and their practical applications.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Timekiller: Escape From QEMU/KVM - Exploiting Asynchronous Clock Vulnerabilities

Demonstrating a novel guest-to-host escape exploit in QEMU/KVM using asynchronous clock vulnerabilities. Introduces "Timekiller" technique to turn heap overflow into arbitrary address write, achieving full VM escape.

• YouTube
• 53 minutes
• On-Demand
• Free Video

The Traps of Using Hyper-V Features in KVM Environment

Explore pitfalls and optimizations when utilizing Hyper-V features in KVM environments, focusing on cloud gaming workloads and system timer configurations for improved virtualization efficiency.

• YouTube
• 19 minutes
• On-Demand
• Conference Talk