Skip to content

Commit 8264477

Browse files
kariyclaude
andauthored
feat(tee): AMD SEV-SNP supported VM image build scripts (#388)
Scripts for building the VM components for running Katana in QEMU VM in direct kernel boot mode with TEE feature enabled. ## Reproducibility The scripts takes into account all variables that may affect the build process for each component of the VM image. A `build-config` file that pins the exact version (as well as the checksum) of each required dependencies. The katana binary that is used in the VM image is a statically-linked version using the musl C standard library. We're not vendoring the cargo dependencies for now so there's a possibility that it may not be reproducible. Vendoring is important for hermetic builds and is considered the gold standard for reproducibility. So, we should tackle this in the future. --------- Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> Co-authored-by: Ammar Arif <kariy@users.noreply.github.com>
1 parent a43e56a commit 8264477

File tree

21 files changed

+2506
-106
lines changed

21 files changed

+2506
-106
lines changed

.dockerignore

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,7 @@ AGENT.md
77
# Build artifacts and caches
88
target/
99
build/
10+
!crates/contracts/build/
1011
monitoring/
1112

1213
# CI/CD files (except the Dockerfile being built)

.gitignore

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,3 +40,11 @@ crates/contracts/build/
4040
!crates/contracts/build/legacy/
4141

4242
**/.claude/settings.local.json
43+
44+
vendor
45+
katana-tee
46+
47+
# AMDSEV build artifacts
48+
misc/AMDSEV/ovmf/
49+
misc/AMDSEV/output/
50+
misc/AMDSEV/source-commit.ovmf

0 commit comments

Comments
 (0)