Jovan Djukic ec306c72b9
CI / checkproto (push) Has been cancelled
CI / ci (push) Has been cancelled
COCOS-397 - Agent certificate generation via CA service (#410)
* Initial commit, will be tested before creating a PR

* Initial commit, will be tested before creating a PR

* Fixed all issues

* Initial commit, will be tested before creating a PR

* Updated agent docs

* Fixed based on comments

* Fixed based on comments

* Initial commit, will be tested before creating a PR

* Updated agent docs

* Fixed based on comments

* Fixed based on comments

* added certificate verification

* Initial commit, will be tested before creating a PR

* Fixed all issues

* Initial commit, will be tested before creating a PR

* Initial commit, will be tested before creating a PR

* Updated agent docs

* Fixed based on comments

* Fixed based on comments

* added certificate verification

* Fixed rebase errors

* Fixed proto issues

* fixed proto issues

* Fixed format error

* Fixed based on comments

* NOISSUE - Simplify local agent running in non sev-snp environment (#411)

* Add vtpm attestation support to agent service and server

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* Update mockery version to v2.53.2 and refactor VM factory to include logger

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* Send event notification when computation is stopped in agentService

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* Remove redundant assignment of Stderr in qemuVM Start method

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* Rename SVM references to CVM in tracing, logging, metrics, and service layers

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

---------

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* Bump github.com/docker/docker (#416)

Bumps [github.com/docker/docker](https://github.com/docker/docker) from 28.0.1+incompatible to 28.0.4+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v28.0.1...v28.0.4)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#412)

Bumps google.golang.org/protobuf from 1.36.5 to 1.36.6.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* COCOS-393 - Disable SSH service and update user shell in cloud config (#396)

* Disable SSH service and update user shell in cloud config

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* Remove SSH server and clean up dependencies in cloud config

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* Add firewall configuration and ensure iptables rules persist after reboot

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* Add algo_user configuration and setup script for container execution

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

---------

Signed-off-by: Sammy Oina <sammyoina@gmail.com>

* Initial commit, will be tested before creating a PR

* Fixed all issues

* Initial commit, will be tested before creating a PR

* Initial commit, will be tested before creating a PR

* Fixed based on comments

* Fixed based on comments

* added certificate verification

* Initial commit, will be tested before creating a PR

* Fixed all issues

* Initial commit, will be tested before creating a PR

* Initial commit, will be tested before creating a PR

* Fixed based on comments

* Fixed rebase errors

* Fixed format error

* Fixed based on comments

* Fixed rebase errors

---------

Signed-off-by: Sammy Oina <sammyoina@gmail.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Sammy Kerata Oina <44265300+SammyOina@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-02 16:52:57 +02:00
2024-04-14 18:05:16 +02:00
2024-12-31 01:12:01 +01:00

Cocos AI 🥥

Confidential Computing System for AI

Made with ❤️ by Ultraviolet

codecov Go report card License

Guide | Contributing | Website

Introduction 🚀

Cocos AI is a cutting-edge platform designed to enable secure multiparty computation (SMPC) using Confidential Computing and Trusted Execution Environments (TEEs).

It empowers organizations to collaboratively process sensitive data for AI/ML workloads while ensuring:

  • 🔒 Data Privacy: Your data stays encrypted and secure throughout the computation.
  • 🛡️ Trust and Integrity: Protected by hardware enclaves with robust remote attestation protocols.
  • 🤝 Seamless Collaboration: Multiple organizations can work together without exposing sensitive information.

Cocos AI Illustration

Features 🛠️

Cocos AI provides essential features for secure and efficient collaborative AI/ML:

  • 🖥️ TEE Enablement and Monitoring: Secure VM management for deploying and monitoring workloads.
  • 🛡️ Hardware Abstraction Layer (HAL): Built on a hardened Linux kernel, secure bootloader, and minimal root filesystem (minimal TCB).
  • 🕵️ In-Enclave Agent and Networking Controller: Essential system software for managing secure workloads.
  • 🔒 Encrypted Data Transfer: Asynchronous data transfer and secure result delivery.
  • 🛠️ API for Platform Manipulation: Programmatic control for managing workloads.
  • Attestation and Verification Tools: Hardware- and software-supported attestation for integrity assurance.
  • 🖱️ Command-Line Interface (CLI): A user-friendly CLI for system interaction.

🚀 Quick Start

Clone the Repository and Build Binaries

git clone git@github.com:ultravioletrs/cocos.git
make

This will generate three binaries:

ls build/
# cocos-agent  cocos-cli  cocos-manager

Deployment Overview:

  • Manager: Deploy on the AMD SEV-SNP host to orchestrate workloads.
  • Agent: Build into the EOS-based HAL for secure enclave management.
  • CLI: Interact with remote agents to control operations.

📚 Documentation

Comprehensive documentation is available at the official documentation page.
For CLI usage details, visit the CLI Documentation.

Documentation is automatically generated from the docs repository. Contributions to documentation are welcome!

🛡️ License

Cocos AI is published under the permissive open-source Apache-2.0 license. Contributions are encouraged and appreciated!

S
Description
Cocos AI - Confidential Computing System for AI
Readme 13 MiB
Languages
Go 95.5%
Shell 2.2%
Makefile 1.6%
Python 0.4%
Rust 0.3%