Commit 8264477
feat(tee): AMD SEV-SNP supported VM image build scripts (#388)
Scripts for building the VM components for running Katana in QEMU VM in direct kernel boot mode with TEE feature enabled.
## Reproducibility
The scripts takes into account all variables that may affect the build process for each component of the VM image. A `build-config` file that pins the exact version (as well as the checksum) of each required dependencies.
The katana binary that is used in the VM image is a statically-linked version using the musl C standard library. We're not vendoring the cargo dependencies for now so there's a possibility that it may not be reproducible. Vendoring is important for hermetic builds and is considered the gold standard for reproducibility. So, we should tackle this in the future.
---------
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
Co-authored-by: Ammar Arif <kariy@users.noreply.github.com>1 parent a43e56a commit 8264477
File tree
21 files changed
+2506
-106
lines changed- crates/tee
- misc/AMDSEV
- snp-tools
- .cargo
- src
- bin
- scripts
21 files changed
+2506
-106
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
7 | 7 | | |
8 | 8 | | |
9 | 9 | | |
| 10 | + | |
10 | 11 | | |
11 | 12 | | |
12 | 13 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
40 | 40 | | |
41 | 41 | | |
42 | 42 | | |
| 43 | + | |
| 44 | + | |
| 45 | + | |
| 46 | + | |
| 47 | + | |
| 48 | + | |
| 49 | + | |
| 50 | + | |
0 commit comments