Claudio Carvalho

Attestation report support with openssl

9

Tom suggested to break the PR #35 into two. The first part PR #41 got merged and this is the second part. The function `get_report()` can be called to request...

@cuviper and @berrange mentioned in the discussion below that it is highly desirable to avoid application specific build targets. From a distro packaging perspective, it would be better to get...

# Description This series adds a DTpm driver to communicate with a virtual TPM running in the Secure VM Service Module (SVSM), enabling OVMF to do measured boot in SEV-SNP...

Extend KBS to provide the resources required to create an encrypted overlay network

3

This PR requires https://github.com/confidential-containers/guest-components/pull/634 to be merged first. This PR resolves #396 by adding the following changes: - Add plugin interface - Add nebula-plugin ### Steps to test it -...

Extend KBS to provide the resources required to create an encrypted overlay network

14

This is a follow-up on the encrypted overlay network support we proposed in the May/09/2024 meeting to secure data in-transit between CoCo PODs. We'd like to use this issue to...

gpu: Fix "libgcc_s.so.1" not found in the nvidia confidential initrd

6

In the nvidia initramfs, the NVRC binary is dynamically linked and it depends on libgcc_s.so.1. ``` $ ~/upx -d bin/NVRC > /dev/null $ ldd bin/NVRC linux-vdso.so.1 (0x00007f3e0e33b000) libgcc_s.so.1 => /lib64/libgcc_s.so.1...

[kata-3.23.0] gpu: no CDI annotations, no devices to inject

4

# Description of problem The issue described below happens maybe 8/10 times when we deploy a `kata-qemu-nvidia-gpu-snp` pod. When deploying a `kata-qemu-nvidia-gpu-snp` pod, ``` apiVersion: v1 kind: Pod metadata: name:...