CCF/attestation-container

Attestation Container

This is a gRPC server application to fetch SEV-SNP attestation and its endorsement.

Environment

This application needs to run on SEV-SNP VM.

Dependencies

• Go
• gRPC

How to start the app

The following command starts the gRPC server application (must be inside SEV-SNP VM).

# In the same directory as this README.md
go run .

You can use insecure virtual mode to run the application on non SEV-SNP VM. (It't not secure. Do not use it in production).

go run . --insecure-virtual

You can find the details of the flag and other flags by running go run . --help.

Build

Since it's a go application, you can build the application before running it.

go build
./attestation-container

API

The gPRC API is defined in attestation-container.proto.

Note that gPRC communication is used over Unix domain sockets (UDS). You can find an example client code in the E2E test.

Test

Unit test:

cd attest
go test # Test for attest package

cd ../uvm
go test # Test for uvm package

E2E test:

# Run the app first
go run .

# In another terminal
go test

Development and maintenance

Update protobuf

When you edit .proto file, you also need to update .pb.go files by:

protoc --go_out=. --go_opt=paths=source_relative --go-grpc_out=. --go-grpc_opt=paths=source_relative protobuf/attestation-container.proto

Upgrade dependencies

PRs to upgrade the dependencies are created automatically by Dependabot (The setting is done here).

However, when Dependabot creates multiple PRs at the same time, go.mod file can be corrupted. In that case, you still need to fix go.mod using go command manually.

go get -u
go mod tidy