Security requirements and running in the public cloud

IncusOS
1

Hello,

Many cloud providers do not support the following:

  • UEFI with Secure Boot

  • TPM 2.0 security module

Are these features mandatory for running IncusOS?

2

TPM2 could be worked around (I remember reading vTPM support, but my memory can be failing), but secure boot is an absolute necessity.

I wouldn’t trust a cloud provider that’s not able to provide such basic features though.

1 Like
3

Secure Boot will always be a requirement for running IncusOS. A TPM is also required, either as part of the physical server or in a virtualized/cloud environment a swtpm-backed implementation.

There are plans to allow IncusOS to run with a software TPM to support physical hardware, such as consumer-grade arm systems, that are difficult/impossible to get a TPM chip. But the expectation would be that it isn’t used when running IncusOS in a virtual machine.

2 Likes