Skip to content

fix(dstack-mr-cli): pass num_nics, num_verity_volumes and swtpm to diagnose - #1367

Merged
kvinwang merged 1 commit into
nextfrom
fix/dstack-mr-cli-diagnose-vm-shape
Sep 24, 2026
Merged

kvinwang merged 1 commit into
nextfrom
fix/dstack-mr-cli-diagnose-vm-shape

Conversation

@kvinwang

@kvinwang kvinwang commented Sep 24, 2026 •

Copy link
Copy Markdown
Collaborator

Problem

dstack-mr diagnose builds its Machine from VmConfig but, unlike the verifier (verifier::compute_measurements), never set num_nics, num_verity_volumes or swtpm. For a VM with a second NIC or verity volume it printed a plausible but wrong RTMR0, and for swtpm: true it printed an RTMR0 where the verifier refuses to measure.

Fix

Pass the three fields, matching the verifier's builder chain.

Verification

cargo clippy -p dstack-mr-cli and cargo fmt --check clean. Diagnostic CLI only; no measurement code changed.

Follow-up (not here): the VmConfig -> Machine translation is duplicated in the verifier, the CLI and dstack-mr::tdx; one shared constructor would stop this drift.

@kvinwang
kvinwang force-pushed the fix/dstack-mr-cli-diagnose-vm-shape branch from e16a24c to fb26f4d Compare September 24, 2026 09:02
@kvinwang kvinwang changed the title fix(dstack-mr-cli): give diagnose the VM shape fields the verifier measures fix(dstack-mr-cli): pass num_nics, num_verity_volumes and swtpm to diagnose Sep 24, 2026
@kvinwang
kvinwang merged commit 3822c8b into next Sep 24, 2026
12 checks passed
@kvinwang
kvinwang deleted the fix/dstack-mr-cli-diagnose-vm-shape branch September 24, 2026 14:21
kvinwang added a commit that referenced this pull request Sep 25, 2026
… parser bounds

#1387 requires PCI hotplug off for GPU passthrough, so the matrix GPU row
failed; measure it with hotplug off and assert the named rejection without.
#1229 reads XLF bit 1, not bit 6, for the initrd ceiling: fix the harness
oracle and add a row with a 5-level-only kernel. #1367 made diagnose honour
num_nics, num_verity_volumes and swtpm; compare it with measure. Run the
new dstack-mr and dstack-types bound vectors from #1229, #1231, #1236 and

Signed-off-by: Kevin Wang <wy721@qq.com>
#1275 by exact name.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant