live wire
▸Red Hat ships important MicroShift 4.16.73 security updateRed Hat Product Errata▸AI · Red Hat maps local AI Inference serving and load tests on RHEL (Oct. 15)Red Hat Emerging Technologies▸PLATFORM · IBM guide maps Secure Execution VMs onto OpenShift Virtualization for LinuxONEIBM Community▸AI · vLLM maps Nemotron 3.5 Super VL across Hopper, Blackwell and Red Hat DSpark (Oct. 15)vLLM Recipes▸AI · AWS contributes push-based KV transfer to vLLM, reporting 3x better TTFT under loadAWS Machine Learning Blog▸AI · AWS contributes bidirectional KV transfer to vLLM, cutting multi-turn TTFT up to 3.3xAWS Machine Learning Blog▸AI · vLLM Semantic Router adds d3-turbo with box and video-tracking decisionsvLLM Semantic Router▸IDENTITY · Keycloak DevDay 2027 opens call for deep technical talks through Oct. 24Keycloak▸AI · vLLM Recipes maps Muse Spark Open to single-node Blackwell and AMD deployment (Oct. 16)vLLM▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security▸Red Hat ships important MicroShift 4.16.73 security updateRed Hat Product Errata▸AI · Red Hat maps local AI Inference serving and load tests on RHEL (Oct. 15)Red Hat Emerging Technologies▸PLATFORM · IBM guide maps Secure Execution VMs onto OpenShift Virtualization for LinuxONEIBM Community▸AI · vLLM maps Nemotron 3.5 Super VL across Hopper, Blackwell and Red Hat DSpark (Oct. 15)vLLM Recipes▸AI · AWS contributes push-based KV transfer to vLLM, reporting 3x better TTFT under loadAWS Machine Learning Blog▸AI · AWS contributes bidirectional KV transfer to vLLM, cutting multi-turn TTFT up to 3.3xAWS Machine Learning Blog▸AI · vLLM Semantic Router adds d3-turbo with box and video-tracking decisionsvLLM Semantic Router▸IDENTITY · Keycloak DevDay 2027 opens call for deep technical talks through Oct. 24Keycloak▸AI · vLLM Recipes maps Muse Spark Open to single-node Blackwell and AMD deployment (Oct. 16)vLLM▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security
upstreambeat.ai
releasePLATFORM

OpenShift sandboxed containers 1.13 brings DGX B200 and offline TDX attestation

The release supports isolated multi-GPU workloads on NVIDIA DGX B200 and lets Trustee verify Intel TDX quotes without cluster access to Intel PCS.

DGX B200 and offline TDX attestation contrasted side by side.
AI-generated illustration
By The News Desk· Oct 6, 2026the quick take — two AI hosts go live when you do

OpenShift sandboxed containers 1.13 widens Red Hat’s isolation stack in two directions that matter for AI infrastructure: larger GPU jobs and confidential-computing deployments that cannot reach public attestation services. The release is aligned with OpenShift Container Platform 4.22, according to the release notes.

Multi-GPU isolation reaches DGX B200

The headline addition is support for multi-GPU workloads on NVIDIA DGX B200 systems running OpenShift sandboxed containers on bare metal. Red Hat says the configuration supports both standard Kata workloads and confidential containers using Intel Trust Domain Extensions (TDX).

This is not the same operational model as a generic bare-metal GPU setup. The NVIDIA driver runs inside the guest virtual machine rather than on the host. Administrators running multi-GPU NVLink workloads must install Fabric Manager and NVLink Switch Manager manually on the host. A single confidential-container workload using four or more GPUs also requires longer kubelet and CRI-O timeouts.

Those constraints make this a planning release rather than a transparent compatibility switch. Platform teams should validate host-side NVLink services and timeout changes before moving large accelerator jobs into Kata-isolated guests. The practical gain is that DGX B200 capacity can now be paired with either conventional sandboxing or TDX-backed confidential containers under the same OpenShift product line.

TDX attestation can stay offline

Red Hat build of Trustee can now verify TDX quotes from bare-metal Kata virtual machines in disconnected environments. Instead of contacting Intel’s Provisioning Certification Service from the cluster, operators can download Data Center Attestation Primitives collateral from a connected workstation, transfer it into the disconnected environment and configure Trustee to use the local material.

There is an upkeep requirement: Red Hat says the offline collateral is valid for no more than 30 days, so operators must refresh it periodically to avoid interrupted attestation. The release also introduces the Intel TDX DCAP Operator, which automates per-node certificate provisioning and Quote Generation Service deployment. It replaces the previous manual setup and supports both online and disconnected registration flows.

What platform teams should do

Teams evaluating 1.13 should treat the GPU and attestation changes as infrastructure work. For DGX B200, confirm where the NVIDIA driver and NVLink services run, then test the extended runtime timeouts at the intended GPU count. For disconnected TDX, establish a recurring collateral-transfer process with a cadence safely inside the 30-day validity window and assess the new DCAP Operator instead of preserving a manual provisioning workflow.

The same release also adds Azure Workload Identity for peer pods on self-managed OpenShift and Azure Red Hat OpenShift, replacing long-lived static Azure credentials with short-lived federated tokens, plus must-gather support for Red Hat build of Trustee.

sources

Filed by The News Desk. Corrections: desk@upstreambeat.ai · Our standards →

comments · 0

    Comments are moderated before they appear. Your email is used once to confirm it is you — never shown, never sold. Corrections and questions get an answer from the desk when we have one.

    more from the desk