Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Attestation driver and proxy (with KBS attestation) #528

Open
wants to merge 10 commits into
base: main
Choose a base branch
from
Open

Attestation driver and proxy (with KBS attestation) #528

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
022aded
kernel/io: Introduce generic Read/Write traits
tylerfanelli Nov 6, 2024
b83dc73
greq/pld_report: Add method to get SEV-SNP report
tylerfanelli Nov 12, 2024
3d1c75c
mm/address_space: Increase stack to 12 pages
tylerfanelli Dec 13, 2024
9b6122a
attest: Initialize module, send negotiation request
tylerfanelli Dec 15, 2024
ccdd195
aproxy: Complete negotiation with KBS protocol
tylerfanelli Dec 15, 2024
2c647ef
attest: Hash negotiation params, write evidence
tylerfanelli Dec 15, 2024
ae89bbf
aproxy: Complete attestation with KBS protocol
tylerfanelli Dec 15, 2024
1656b02
attest: Decrypt secret from proxy
tylerfanelli Dec 15, 2024
a293866
aproxy: Use static registrar for backend protocol
tylerfanelli Dec 17, 2024
1444e15
.github: Exclude aproxy from clippy checks
tylerfanelli Dec 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .github/workflows/rust.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ jobs:
uses: actions-rs/cargo@v1
with:
command: clippy
args: --workspace --exclude igvmbuilder --exclude igvmmeasure --exclude svsm-fuzz --exclude packit --exclude stage1 --all-features -- -D warnings
args: --workspace --exclude igvmbuilder --exclude igvmmeasure --exclude svsm-fuzz --exclude packit --exclude stage1 --exclude aproxy --all-features -- -D warnings

- name: Clippy on std x86_64-unknown-linux-gnu
uses: actions-rs/cargo@v1
Expand Down Expand Up @@ -149,7 +149,7 @@ jobs:

- name: Clippy with undocumented_unsafe_blocks for PR branch
run: |
cargo clippy --workspace --all-features --exclude packit --exclude stage1 --exclude svsm-fuzz --exclude igvmbuilder --exclude igvmmeasure --quiet -- -W clippy::undocumented_unsafe_blocks 2> clippy_warnings_pr.txt || ( cat clippy_warnings_pr.txt; exit 1 )
cargo clippy --workspace --all-features --exclude packit --exclude stage1 --exclude svsm-fuzz --exclude igvmbuilder --exclude igvmmeasure --exclude aproxy --quiet -- -W clippy::undocumented_unsafe_blocks 2> clippy_warnings_pr.txt || ( cat clippy_warnings_pr.txt; exit 1 )

# Required because after the next checkout everything is removed.
- name: Upload PR warnings artifact
Expand All @@ -169,7 +169,7 @@ jobs:

- name: Clippy with undocumented_unsafe_blocks for base branch
run: |
cargo clippy --workspace --all-features --exclude packit --exclude stage1 --exclude svsm-fuzz --exclude igvmbuilder --exclude igvmmeasure --quiet -- -W clippy::undocumented_unsafe_blocks 2> clippy_warnings_base.txt || ( cat clippy_warnings_base.txt; exit 1 )
cargo clippy --workspace --all-features --exclude packit --exclude stage1 --exclude svsm-fuzz --exclude igvmbuilder --exclude igvmmeasure --exclude aproxy --quiet -- -W clippy::undocumented_unsafe_blocks 2> clippy_warnings_base.txt || ( cat clippy_warnings_base.txt; exit 1 )

- name: Download PR warnings artifact
uses: actions/download-artifact@v4
Expand All @@ -187,7 +187,7 @@ jobs:
echo "ERROR: $(($PR_WARNINGS - $BASE_WARNINGS)) new undocumented unsafe code blocks detected in this PR"
echo "enabling the clippy::undocumented_unsafe_blocks lint in this way:"
echo "$ cargo clippy --workspace --all-features --exclude packit --exclude stage1 --exclude svsm-fuzz \\"
echo " --exclude igvmbuilder --exclude igvmmeasure -- -W clippy::undocumented_unsafe_blocks"
echo " --exclude igvmbuilder --exclude igvmmeasure --exclude aproxy -- -W clippy::undocumented_unsafe_blocks"
echo ""
diff --color -u clippy_warnings_base.txt clippy_warnings_pr.txt
exit 1
Expand Down
Loading
Loading