adding in GPU device binding event

Author: Sibcgh

cel/cos_tlv.go

@@ -48,6 +48,7 @@ const (
 	LaunchSeparatorType
 	MemoryMonitorType
 	GpuCCModeType
+	GPUDeviceAttestationBindingType
 )
 
 // CosTlv is a specific event type created for the COS (Google Container-Optimized OS),

launcher/agent/agent_test.go

@@ -645,6 +645,9 @@ func measureFakeEvents(attestAgent AttestationAgent) error {
 	if err := attestAgent.MeasureEvent(cel.CosTlv{EventType: cel.OverrideArgType, EventContent: []byte(arg)}); err != nil {
 		return err
 	}
+	if err := attestAgent.MeasureEvent(cel.CosTlv{EventType: cel.GPUDeviceAttestationBindingType, EventContent: []byte(arg)}); err != nil {
+		return err
+	}
 	return nil
 }
 

launcher/container_runner.go

@@ -421,6 +421,17 @@ func (r *ContainerRunner) measureMemoryMonitor() error {
 	return nil
 }
 
+// TODO: Test functionality once GPU support is available.
+// measureGPUAttestationEvidence will measure GPU attestation claims into the COS
+// eventlog in the AttestationAgent.
+func (r *ContainerRunner) measureGPUAttestationEvidence() error {
+	if err := r.attestAgent.MeasureEvent(cel.CosTlv{EventType: cel.GPUDeviceAttestationBindingType, EventContent: []byte{}}); err != nil {
+		return err
+	}
+	r.logger.Info("Successfully measured GPU device attestation binding event")
+	return nil
+}
+
 // Retrieves the default OIDC token from the attestation service, and returns how long
 // to wait before attemping to refresh it.
 // The token file will be written to a tmp file and then renamed.

server/eventlog.go

@@ -450,6 +450,9 @@ func getVerifiedCosState(coscel gecel.CEL, registerType gecel.MRType) (*pb.Attes
 			}
 			cosState.GpuDeviceState.CcMode = pb.GPUDeviceCCMode(ccMode)
 
+		// TODO: add support for GPU Device Attestation Binding Event
+		// case cel.GPUDeviceAttestationBindingType:
+
 		default:
 			return nil, fmt.Errorf("found unknown COS Event Type %v", cosTlv.EventType)
 		}