Code

WIP: Update docker image for SEV#668

Code

Open

dreemkiller wants to merge 29 commits intomainveracruz-project/veracruz:mainfrom dreemkiller_amd_sev_update_dockerveracruz-project/veracruz:dreemkiller_amd_sev_update_dockerCopy head branch name to clipboard

+13,359-37

Commits

Commits on Dec 1, 2023

• Added SEV-SNP files. Building, but needs work

  dreemkiller

  committed
  ac413e1

  Copy full SHA for ac413e1

• Streamlinging the SEV guest image generation

  dreemkiller

  committed
  ea12f10

  Copy full SHA for ea12f10

• More SEV files

  dreemkiller

  committed
  1d0ee73

  Copy full SHA for 1d0ee73

• SEV working. Mosts test pass. Intermittent failures

  dreemkiller

  committed
  504b13e

  Copy full SHA for 504b13e

• Changed SEV to run the Veracruz runtime as pid1 (instead of as a service)

  dreemkiller

  committed
  8bf664a

  Copy full SHA for 8bf664a

• Changed formatting on the hash comparison message to hex

  dreemkiller

  committed
  01a7f47

  Copy full SHA for 01a7f47

• Updated sev measurement (this'll happen a lot until I fix something)

  dreemkiller

  committed
  0604064

  Copy full SHA for 0604064

• Added Linux kernel compile to the sev-runtime-manager build process(for now)

  dreemkiller

  committed
  4ae1449

  Copy full SHA for 4ae1449

• Changed the qemu command line options to clean things up

  dreemkiller

  committed
  e253262

  Copy full SHA for e253262

• Cleanup from the rebase

  dreemkiller

  committed
  38d4e0a

  Copy full SHA for 38d4e0a

• Integrating AMD SEV dependencies into the docker build

  dreemkiller

  committed
  ac9131d

  Copy full SHA for ac9131d

• Updated to the latest changes of SEV. Using a rust crate for SEV attestation report generation

  dreemkiller

  committed
  7bf0488

  Copy full SHA for 7bf0488

• Added dynamic measurement of the OVMF binary for attestation

  dreemkiller

  committed
  0d04705

  Copy full SHA for 0d04705

• Updated nitro-enclave vsocket for Nitro (this will be fixed longer term)

  dreemkiller

  committed
  c045097

  Copy full SHA for c045097

• Changed Docker version number

  dreemkiller

  committed
  86aca6c

  Copy full SHA for 86aca6c

• Updated cosign for the docker workflow

  dreemkiller

  committed
  e49d725

  Copy full SHA for e49d725

• Updated the docker image hash for CI

  dreemkiller

  committed
  2a49ca5

  Copy full SHA for 2a49ca5

Commits on Dec 4, 2023

• Updated github to use my branch

  dreemkiller

  committed
  83a9e01

  Copy full SHA for 83a9e01

Commits on Dec 6, 2023

• Removed the patches for the nitro-enclave and proxy-attestation-client crates

  dreemkiller

  committed
  1d36dd0

  Copy full SHA for 1d36dd0

Commits on Jan 19, 2024

• Added SEV-SNP build to github workflow

  dreemkiller

  committed
  02e921d

  Copy full SHA for 02e921d

• Anchored protobuf-codegen version because of compatibility issues with home dependency

  dreemkiller

  committed
  03ecf7e

  Copy full SHA for 03ecf7e

• Pinned to a specific home version so we don't have to upgrade the compiler

  dreemkiller

  committed
  6e2cc68

  Copy full SHA for 6e2cc68

Commits on Jan 22, 2024

• Reverted the SEV changes for CI workflow so the Docker changes can go in first

  dreemkiller

  committed
  206891e

  Copy full SHA for 206891e

• Updated Docker VERSION

  dreemkiller

  committed
  104dc69

  Copy full SHA for 104dc69

• Updated the hash of the docker image for CI

  dreemkiller

  committed
  bb11881

  Copy full SHA for bb11881

• Pinned home version in tlstest because the latest version requires an upgrade to rustc

  dreemkiller

  committed
  e413a5a

  Copy full SHA for e413a5a

• Changed CI docker to use SEV as it's source

  dreemkiller

  committed
  0629032

  Copy full SHA for 0629032

Commits on Jan 23, 2024

• Test: Remove guest kernel build from SEV Docker. See if CI completes

  dreemkiller

  committed
  7fff259

  Copy full SHA for 7fff259

• Moved SEV DOcker build to stages to make it smaller

  dreemkiller

  committed
  207b83c

  Copy full SHA for 207b83c