mirror of
https://github.com/ultravioletrs/cocos.git
synced 2026-06-23 04:10:25 +00:00
Sammy Kerata Oina
f77ec5644a
CI / checkproto (push) Has been cancelled
CI / lint (push) Has been cancelled
Rust CI Pipeline / rust-check (push) Has been cancelled
CI / test (agent) (push) Has been cancelled
CI / test (cli) (push) Has been cancelled
CI / test (cmd) (push) Has been cancelled
CI / test (internal) (push) Has been cancelled
CI / test (manager, true) (push) Has been cancelled
CI / test (pkg) (push) Has been cancelled
CI / upload-coverage (push) Has been cancelled
* feat: Add Confidential Containers attestation agent as an alternative attestation backend with new proto definitions and build system integration. Signed-off-by: Sammy Oina <sammyoina@gmail.com> * fix: Update protoc-gen-go and protoc-gen-go-grpc versions in CI workflow Signed-off-by: Sammy Oina <sammyoina@gmail.com> * feat: Add mock implementation for AttestationAgentServiceClient and corresponding tests Signed-off-by: Sammy Oina <sammyoina@gmail.com> * fix: Add missing periods to test function comments in provider_test.go Signed-off-by: Sammy Oina <sammyoina@gmail.com> --------- Signed-off-by: Sammy Oina <sammyoina@gmail.com>
43 lines
1.4 KiB
Plaintext
43 lines
1.4 KiB
Plaintext
choice
|
|
prompt "Attestation Backend"
|
|
default BR2_PACKAGE_ATTESTATION_BACKEND_COCOS
|
|
help
|
|
Select the attestation backend to use for confidential computing.
|
|
|
|
The Cocos AI attestation service is the native implementation
|
|
that generates EAT (Entity Attestation Token) tokens locally.
|
|
|
|
The Confidential Containers attestation-agent is an alternative
|
|
implementation that supports the KBS (Key Broker Service) protocol
|
|
for optional remote attestation and secret provisioning.
|
|
|
|
config BR2_PACKAGE_ATTESTATION_BACKEND_COCOS
|
|
bool "Cocos AI Attestation Service"
|
|
help
|
|
Native Cocos AI attestation service that generates EAT tokens
|
|
locally for TEE attestation (SNP, TDX, vTPM, Azure).
|
|
|
|
This is the default and recommended option for most use cases.
|
|
|
|
https://github.com/ultravioletrs/cocos
|
|
|
|
config BR2_PACKAGE_ATTESTATION_BACKEND_CC
|
|
bool "Confidential Containers Attestation Agent"
|
|
depends on BR2_PACKAGE_HOST_RUSTC
|
|
help
|
|
Confidential Containers attestation-agent with optional KBS
|
|
protocol support for remote attestation and secret provisioning.
|
|
|
|
Can operate in local mode (without KBS) or with KBS endpoint
|
|
configured per-computation for encrypted data retrieval.
|
|
|
|
Requires Rust toolchain for building.
|
|
|
|
https://github.com/confidential-containers/guest-components
|
|
|
|
endchoice
|
|
|
|
config BR2_PACKAGE_ATTESTATION_SERVICE
|
|
bool
|
|
default y if BR2_PACKAGE_ATTESTATION_BACKEND_COCOS
|