tdx

package
v0.2601.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jun 8, 2026 License: Apache-2.0 Imports: 26 Imported by: 0

Documentation

Overview

Package tdx implements the TDX runtime provisioner.

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func NewQemuProvisioner added in v0.2500.0

func NewQemuProvisioner(cfg QemuConfig) (host.Provisioner, error)

NewQemuProvisioner creates a new QEMU-based TDX runtime provisioner.

Types

type CidPool added in v0.2502.0

type CidPool struct {
	// contains filtered or unexported fields
}

CidPool is a pool of context IDs (CIDs) that can be assigned to virtual machines (VMs) to identify them in VSOCK connections.

func NewCidPool added in v0.2502.0

func NewCidPool(start, count uint32) (*CidPool, error)

NewCidPool creates a new CID pool containing the given range of CIDs.

func (*CidPool) Allocate added in v0.2502.0

func (c *CidPool) Allocate() (uint32, error)

Allocate allocates a CID from the pool.

func (*CidPool) AllocateExact added in v0.2502.0

func (c *CidPool) AllocateExact(cid uint32) error

AllocateExact allocates a specific CID from the pool.

func (*CidPool) Release added in v0.2502.0

func (c *CidPool) Release(cid uint32) bool

Release releases the given previously allocated CID back to the pool.

type QemuConfig

type QemuConfig struct {
	// DataDir is the node data directory.
	DataDir string
	// HostInfo provides information about the host environment.
	HostInfo *protocol.HostInfo

	// CommonStore is a handle to the node's common persistent store.
	CommonStore *persistent.CommonStore

	// PCS is the Intel Provisioning Certification Service quote service.
	PCS pcs.QuoteService
	// QuotePolicy provides the quote policy for RONL deployments.
	QuotePolicy sgxCommon.QuotePolicyProvider
	// Identity is the node identity.
	Identity *identity.Identity

	// CidPool is a pool of CIDs to allocate from.
	CidPool *CidPool

	// RuntimeAttestInterval is the interval for periodic runtime re-attestation. If not specified
	// a default will be used.
	RuntimeAttestInterval time.Duration
}

QemuConfig is the configuration of the QEMU-based TDX runtime provisioner.

type QemuExtraConfig

type QemuExtraConfig struct {
	// CID is the VSOCK cid to use for this runtime. If zero, the CID is automatically assigned.
	CID uint32
}

QemuExtraConfig is the per-runtime QEMU-specific extra configuration.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL