SGX has a stronger security model, but targets enclaves instead of VMs. If you want something to run in SGX, you will likely need to rewrite the software (you

SGX has a stronger security model, but targets enclaves instead of VMs. If you want something to run in SGX, you will likely need to rewrite the software (you can’t call syscalls directly in SGX since you cannot trust their results anyway). SEV’s security model is weaker (no integrity), but lets you use essentially normal VM images. Disclaimer: I work at Google in this space.