Documentation
¶
Overview ¶
Package cel contains implementation for COS TLV event
Index ¶
Constants ¶
const ( // CosEventType indicates the CELR event is a COS content // TODO: the value needs to be reserved in the CEL spec CosEventType uint8 = 80 // CosEventPCR is the PCR which should be used for CosEventType events. CosEventPCR = 13 // CosRTMR is the RTMR to be extended for COS events // According to https://uefi.org/specs/UEFI/2.10/38_Confidential_Computing.html // CCELMRIndex TDX Register // 0 MRTD // 1 RTMR[0] // 2 RTMR[1] // 3 RTMR[2] // So: // 4 RTMR[3] CosRTMR = 3 // CosCCELMRIndex is the CCMR index to use in eventlog for COS events. CosCCELMRIndex = 4 )
Variables ¶
This section is empty.
Functions ¶
func FormatEnvVar ¶
FormatEnvVar takes in an environment variable name and its value, run some checks. Concats the name and value by '=' and returns it if valid; returns an error if the name or value is invalid.
Types ¶
type CosTlv ¶
CosTlv is a specific event type created for the COS (Google Container-Optimized OS), used as a CEL content.
func ParseToCosTlv ¶ added in v0.4.8
ParseToCosTlv constructs a CosTlv from a TLV. It will check for the correct COS event type, and unmarshal the nested event.
func (CosTlv) GenerateDigest ¶
GenerateDigest generates the digest for the given COS TLV. The whole TLV struct will be marshaled to bytes and feed into the hash algo.
type CosType ¶
type CosType uint8
CosType represent a COS content type in a CEL record content.
const ( ImageRefType CosType = iota ImageDigestType RestartPolicyType ImageIDType ArgType EnvVarType OverrideArgType OverrideEnvType // EventContent is empty on success, or contains an error message on failure. LaunchSeparatorType MemoryMonitorType GpuCCModeType GPUDeviceAttestationBindingType )
Type for COS nested events