Skip to content

Add example crypt-kv - #10

Merged
kvinwang merged 3 commits into
masterfrom
crypt-kv
Dec 6, 2024
Merged

kvinwang merged 3 commits into
masterfrom
crypt-kv

Conversation

@kvinwang

@kvinwang kvinwang commented Nov 13, 2024 •

Copy link
Copy Markdown
Collaborator

@kvinwang
kvinwang merged commit 51333ee into master Dec 6, 2024
@kvinwang
kvinwang deleted the crypt-kv branch December 6, 2024 01:02
kvinwang added a commit that referenced this pull request Jan 19, 2026
kvinwang added a commit to clawdbot-glitch003/dstack that referenced this pull request Jun 23, 2026
…ack-TEE#10)

* fix: implement GcpTdx and NitroEnclave support in V1 attestation

The upstream merge left V1 AttestationV1's decode_app_info_ex and
verify_with_time with bail!() stubs for GcpTdx and NitroEnclave,
since upstream only has empty placeholders for these platforms.

This commit adds full implementations:

- decode_app_info_ex: GcpTdx uses TPM PCR-based MR computation,
  NitroEnclave uses NSM PCR-based MR computation
- verify_with_time: GcpTdx performs TDX quote + TPM quote verification
  with PCR replay, NitroEnclave performs COSE signature + cert chain
  verification

All callers (guest-agent, KMS, verifier, ra-rpc) use into_v1() and
were broken on these platforms without this fix.

* fix: mark vsock listener bind test as ignored in CI

The test requires vsock kernel support which is not available in
GitHub Actions runners.
source-c pushed a commit to silicon-foundation/dstack that referenced this pull request Jul 13, 2026
source-c pushed a commit to silicon-foundation/dstack that referenced this pull request Jul 13, 2026
add gcp service account and scope config
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant