Skip to content

features: add runtime attestation page#161

Merged
fitzthum merged 1 commit intoconfidential-containers:mainfrom
fitzthum:runtime-attestation-feature
Feb 13, 2026
Merged

features: add runtime attestation page#161
fitzthum merged 1 commit intoconfidential-containers:mainfrom
fitzthum:runtime-attestation-feature

Conversation

@fitzthum
Copy link
Member

We've supported runtime attestation from the workload for a few releases. Let's add a feature page describing how to use it.

@netlify
Copy link

netlify bot commented Feb 12, 2026

Deploy Preview for frolicking-manatee-96c0c8 ready!

Name Link
🔨 Latest commit 5bf958b
🔍 Latest deploy log https://app.netlify.com/projects/frolicking-manatee-96c0c8/deploys/698f3ebe29a5be000796f8a9
😎 Deploy Preview https://deploy-preview-161--frolicking-manatee-96c0c8.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Copy link
Contributor

@mythi mythi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

-d '{"domain":"test","operation":"test","content":"test"}'
```

The `domain` and `operation` are context fields that will be included in the event log.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

since the example uses ASR, we could easily show how the token claims capture the events:

$ curl http://127.0.0.1:8006/aa/token\?token_type\=kbs | jq -r '.token |split(".") | .[1] | @base64d | fromjson'
...
the eventlog in AA token gets a record:

            {
              "details": {
                "data": {
                  "content": "Hello World",
                  "domain": "tdx",
                  "operation": "rtmr-extend"
                },
                "string": "tdx rtmr-extend Hello World",
                "unicode_name": "AAEL"
              },
              "digest_matches_event": true,
              "digests": [
                {
                  "alg": "SHA-384",
                  "digest": "1495be3eb2120e8c408f5f85301da8fb5cc49a50502047298b652f59facb8f3eba0ce6011a0b9ec528d02fe42447d64f"
                }
              ],
              "event": "TEVBQRsAAAB0ZHggcnRtci1leHRlbmQgSGVsbG8gV29ybGQ=",
              "index": 4,
              "type_name": "EV_EVENT_TAG"
            }

(a copy-paste I've used elsewhere and it does not match with {"domain":"test","operation":"test","content":"test"}. it also assumed jq is installed.).

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good idea. Added.

@fitzthum fitzthum force-pushed the runtime-attestation-feature branch from 38ead9c to a35fb49 Compare February 13, 2026 14:57
We've supported runtime attestation from the workload for a few releases.
Let's add a feature page describing how to use it.

Signed-off-by: Tobin Feldman-Fitzthum <tfeldmanfitz@nvidia.com>
@fitzthum fitzthum force-pushed the runtime-attestation-feature branch from a35fb49 to 5bf958b Compare February 13, 2026 15:09
@fitzthum fitzthum merged commit ce93c49 into confidential-containers:main Feb 13, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants