RATATOSKRATATOSK
Sign in

Confidential Containers

v0.23.0Security
Sep 28, 2026

ACTION 1CHECK 2OTHER 27

A capability-focused release adds attestation, plugin, storage, and CLI functionality while changing defaults and supported components. It also removes the `eHSM` and `online-sev-kbc` integrations from `guest-components` and retains platform limitations.

Action needed (1)

  • breakingDefault-enabled Trustee external plugin

    The Trustee external plugin is enabled by default in this release.

Check if affected (2)

  • breakingeHSM support removed from guest-components

    Applies if you use eHSM.

    Support for eHSM is removed from guest-components.

  • breakingonline-sev-kbc support removed from guest-components

    Applies if you use online-sev-kbc.

    Support for online-sev-kbc is removed from guest-components.

All 27 other recorded changesvalue changes 15 · additions 11 · constraints 1

value changes (15)

  • This release is based on [4.2.0](https://github.com/kata-containers/kata-containers/releases/tag/4.2.0) of Kata Containers.
  • This release uses v0.22.0 of Trustee and guest components.
  • Trustee and the guest components use KBS protocol v0.4.0.
  • Trustee and guest components use Rust v1.95.0.
  • * Improved support for pre-provisioning SNP VCEKs
  • * Minor changes to TCB Claims generated by Trustee
  • * Improved support for HTTPS in Trustee Helm chart
  • * Trustee allow-all KBS Policy allows resources from all plugins
  • * Minor improvements to KBS Client
  • * Optimizations for TDX verification
  • * Improvements to eventlog handling in guest-components
  • * Improvements to image unpacking in image-rs
  • * Improvements to logging for image-rs
  • * Improvements to ASR
  • * SNP attester uses configfs-tsm

additions (11)

  • * Experimental PQC support for Trustee attestation
  • * Provisioner plugin added to Trustee
  • * guest-components provides Kata extension image
  • * Trustee Helm chart can use Redis/Valkey for storing session information.
  • * RVPS supports listing reference values
  • * RVPS supports deleting reference values
  • * Attestation service supports selectable attestation policy
  • * KBS resource plugin supports listing resources.
  • * Image-rs supports optional fallback to anonymous registry auth
  • * Secret CLI tool published as a package
  • * Secret CLI tool supports generating keys

constraints (1)

  • * Guest-components provides NVIDIA attester with all x86 builds
Add Confidential Containers to your stack

A weekly email arrives when a release needs action. Like the breaking changes in this release.

Add to stack →
Official release note ↗All Confidential Containers releases →