aljaz/kata-containers
1
0
Fork 0
mirror of https://github.com/aljazceru/kata-containers.git synced 2026-02-15 11:34:22 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
c3a8ce53e63d57b71259482271c8fa7edb89048e
kata-containers/src/runtime/pkg/sev
History
Jim Cadden 4eb88d6a74 runtime: Add online-kbs to kernel params 
In online-kbs attestation the guest is given the location of the
keybroker server to connect after launch. This patch appends the
IP:Port of the online-kbs to the kernel params of the guest.

Patch also simplifies the kbs config into "mode" = offline/online,
and updates SEV config variable names and default values

Fixes: #5661 #5715

Signed-off-by: Jim Cadden <jcadden@ibm.com>
2023-02-28 10:51:46 -05:00
..
kbs
runtime: Add online-kbs to kernel params
2023-02-28 10:51:46 -05:00
testdata
runtime: sev: Add unittests; allow measurement without kernel
2022-10-27 16:45:53 +03:00
ovmf.go
runtime: pkg/sev: Support SEV-ES launch digest calculation
2022-11-28 18:08:50 +00:00
README.md
runtime: sev: Add unittests; allow measurement without kernel
2022-10-27 16:45:53 +03:00
sev_test.go
runtime: pkg/sev: Support SEV-ES launch digest calculation
2022-11-28 18:08:50 +00:00
sev.go
runtime: Add online-kbs to kernel params
2023-02-28 10:51:46 -05:00
vcpu_sigs_test.go
runtime: Support launching SEV-ES guests
2022-12-21 21:29:45 +00:00
vcpu_sigs.go
runtime: Support launching SEV-ES guests
2022-12-21 21:29:45 +00:00
vmsa.go
runtime: pkg/sev: Support SEV-ES launch digest calculation
2022-11-28 18:08:50 +00:00

README.md

AMD SEV confidential guest utilities

This package provides utilities for launching AMD SEV confidential guests.

Calculating expected launch digests

The CalculateLaunchDigest function can be used to calculate the expected SHA-256 of an SEV confidential guest given its firmware, kernel, initrd, and kernel command-line.

Unit test data

The testdata directory contains file used for testing CalculateLaunchDigest.