harald/teepot
1
0
Fork 0
mirror of https://github.com/matter-labs/teepot.git synced 2025-07-21 15:13:56 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions
466 commits 23 branches 61 tags 2.2 MiB
Commit graph

466 commits

This branch
This branch
All branches
Author SHA1 Message Date
Harald Hoyer
7cb3af4b65
Merge branch 'main' into no_quote 2025-03-06 09:30:33 +01:00
Harald Hoyer
51dc68b12f
Merge pull request #290 from matter-labs/self-attestation-readme-podman 
docs(tee-self-attestation-test): add podman example
 2025-03-06 09:30:17 +01:00
Harald Hoyer
55ea2a6069
fix(verify-attestation): bail out, if no quote provided 
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-03-06 09:07:31 +01:00
Harald Hoyer
98ed802b75
docs(tee-self-attestation-test): add podman example 
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-03-06 08:57:55 +01:00
Harald Hoyer
89145514b0
Merge pull request #285 from matter-labs/missing_recoverid_two 
fix(verify-era-proof-attestation): handle missing RecoveryId signatures
 2025-03-03 10:47:59 +01:00
Harald Hoyer
bece17f7bf
Merge branch 'main' into missing_recoverid_two 2025-03-03 08:52:32 +01:00
Harald Hoyer
bce991f77c
Merge pull request #283 from matter-labs/rustls_ring_provider 
fix(teepot-vault): use `ring` as `CryptoProvider` for `rustls`
 2025-03-01 09:36:27 +01:00
Harald Hoyer
589e375d47
Merge branch 'main' into rustls_ring_provider 2025-03-01 09:11:21 +01:00
Harald Hoyer
a6ea98a096
fix(verify-era-proof-attestation): handle missing RecoveryId signatures 
- add `RecoveryId::Two` and `RecoveryId::Three`

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-03-01 09:07:29 +01:00
Harald Hoyer
736fe10200
Merge pull request #284 from matter-labs/missing_recoverid 
fix(verify-era-proof-attestation): handle missing RecoveryId signatures
 2025-02-28 19:31:49 +01:00
Harald Hoyer
c26b3db290
fix(verify-era-proof-attestation): handle missing RecoveryId signatures 
- Add fallback for missing RecoveryId in 64-byte signatures.
- Improve error context for invalid signature length.
- Add debug and trace logs for better diagnosis during verification.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-02-28 17:31:59 +01:00
Harald Hoyer
d6061c35a8
fix(teepot-vault): use ring as CryptoProvider for rustls 
New `rustls` needs global install of default `CryptoProvider`.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-02-28 14:14:57 +01:00
Harald Hoyer
0a73ed5012
Merge pull request #279 from matter-labs/cargo_update 
chore: remove unused `rand` dependency and update crates
 2025-02-27 10:40:34 +01:00
Harald Hoyer
d3c17a7ace
Merge branch 'main' into cargo_update 2025-02-25 13:22:35 +01:00
Harald Hoyer
942091d3ae
Merge pull request #277 from matter-labs/rtmr3 
feat(tdx): add TDX RTMR extension support with UEFI marker
 2025-02-25 13:21:57 +01:00
Harald Hoyer
bd24825ece
Merge branch 'main' into cargo_update 2025-02-21 09:31:25 +01:00
Harald Hoyer
46b9269fc1
Merge branch 'main' into rtmr3 2025-02-21 09:31:18 +01:00
Harald Hoyer
d345c62db7
Merge pull request #278 from matter-labs/metadata-fail 
feat(tdx_google): add onFailure action to reboot on metadata.service errors
 2025-02-21 09:28:28 +01:00
Harald Hoyer
f822c70721
chore: remove unused rand dependency and update crates 
- Removed `rand` dependency from multiple `.toml` files and updated relevant imports to use `rand_core::OsRng`.
- Updated OpenTelemetry dependencies to latest versions and refactored SDK initialization to use `SdkLoggerProvider`.
- Bumped versions of several dependencies including `clap`, `awc`, `ring`, and `smallvec` for compatibility and features.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-02-20 15:40:13 +01:00
Harald Hoyer
cf4a6cfb60
feat(tdx_google): add onFailure action to reboot on metadata.service errors 
- Introduce `onFailure` handler to trigger reboot after 5 minutes.
- Enhances system reliability by automating recovery measures.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-02-20 15:32:51 +01:00
Harald Hoyer
049f1b3de8
feat(tdx): add TDX RTMR extension support with UEFI marker 
- Added `UEFI_MARKER_DIGEST_BYTES` constant for TDX RTMR extension.
- Implemented RTMR3 extension in `tee-key-preexec` for TDX attestation flow.
- Updated `rtmr-calc` to use `UEFI_MARKER_DIGEST_BYTES` for RTMR1 extension.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-02-20 15:15:44 +01:00
Harald Hoyer
a430e2f93b
Merge pull request #276 from matter-labs/sys 
feat(tdx_google): add support for attestation in container
 2025-02-20 12:55:39 +01:00
Harald Hoyer
a5cf220c57
feat(tdx_google): add support for attestation in container 
- Mount `/sys/kernel/config` to enable attestation for TDX containers.
- Ensures compatibility with TDX guest measurements during runtime.
 2025-02-20 12:14:10 +01:00
Harald Hoyer
e936f5079d
Merge pull request #272 from matter-labs/refactor 
refactor(tdx_google): modularize tdx_google configuration
 2025-02-20 10:04:11 +01:00
Harald Hoyer
439574f22c
chore(tdx_google): remove unused teepot package from system environment 
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-02-19 15:01:02 +01:00
Harald Hoyer
760ff7eff1
refactor(tdx_google): simplify service configurations 
- Replaced hardcoded metadata-fetching logic with shared metadata service.
- Removed custom pre-start scripts and refactored environment handling.
- Updated Vector configuration to include custom field transformations.
- Streamlined container startup process and ensured proper cleanup.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-02-19 15:00:43 +01:00
Harald Hoyer
5d2ad57cfd
refactor(tdx_google): modularize tdx_google configuration 
- Split `tdx_google/configuration.nix` into smaller modules: `vector.nix`, and `container.nix`.
- Simplified the main configuration by leveraging modular imports for better readability and maintainability.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>

# Conflicts:
#	packages/tdx_google/configuration.nix
 2025-02-19 15:00:42 +01:00
Harald Hoyer
4d273076ee
Merge pull request #271 from matter-labs/Metadata-Flavor 
fix(teepot): add custom HTTP header for google metadata and update default endpoint
 2025-02-19 14:59:09 +01:00
Harald Hoyer
98a71b3e3a
fix(teepot): add custom HTTP header for google metadata and update default endpoint 
- Replace `reqwest::get` with a configured `reqwest::Client` to support custom headers (e.g., "Metadata-Flavor: Google").
- Update default OTLP endpoint to include the "http://" prefix for clarity.
 2025-02-19 13:58:39 +01:00
Harald Hoyer
ee3061b2ec
Merge pull request #270 from matter-labs/serial 
feat(configuration): update journald and serial settings
 2025-02-19 11:30:28 +01:00
Harald Hoyer
bbbce81541
feat(configuration): update journald and serial settings 
- Set journald console to `/dev/ttyS0` for improved logging.
- Disable `serial-getty@ttyS0` service to avoid conflicts.
 2025-02-19 11:16:34 +01:00
Harald Hoyer
c4b1431221
Merge pull request #268 from matter-labs/tdx-test 
feat: rewrite google-metadata test as tdx-test
 2025-02-18 08:36:12 +01:00
Harald Hoyer
daf375836b
chore: remove unused deps 
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-02-14 16:47:45 +01:00
Harald Hoyer
fbbb37ca5a
tests(tdxtest): ramp up the testing 
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-02-14 16:47:44 +01:00
Harald Hoyer
a41460b7f0
feat(tdx-google): enhance container service setup 
- Add `vector.service` and `chronyd.service` dependencies to `docker_start_container` service.
- Use `EnvironmentFile` and a pre-start script to dynamically generate environment variables for container setup.
- Improve error handling and clarity in container initialization.
 2025-02-14 16:47:43 +01:00
Harald Hoyer
908579cd60
feat: rewrite google-metadata test as tdx-test 
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-02-14 16:47:42 +01:00
Harald Hoyer
3325312c0d
Merge pull request #255 from matter-labs/vector_kafka 
feat(google-tdx): add vector pushing to kafka for logging
 2025-02-13 10:00:59 +01:00
Harald Hoyer
9266a9f072
feat(google-tdx): add Vector service integration 
- Enable Vector service and configure OpenTelemetry source.
- Add sinks for logs output to console and Kafka.
- Configure environment setup for Kafka using GCP metadata API.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-02-12 08:34:18 +01:00
Harald Hoyer
ff22db6054
chore(google-tdx): removed commented-out ssh debugging 
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-02-11 08:29:34 +01:00
Harald Hoyer
c5cdc1e4ab
feat(google-tdx): disable LLMNR and MulticastDNS 
- Configured resolved service, disabling LLMNR and MulticastDNS
  for improved resolution settings.

- Removed commented-out Prometheus Node config

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-02-11 08:29:29 +01:00
Harald Hoyer
fae9ad7f58
Merge pull request #264 from matter-labs/renovate/trufflesecurity-trufflehog-3.x 
chore(deps): update trufflesecurity/trufflehog action to v3.88.6
 2025-02-11 08:28:54 +01:00
renovate[bot]
f3f5147bb1
chore(deps): update trufflesecurity/trufflehog action to v3.88.6 2025-02-10 18:59:21 +00:00
Harald Hoyer
a65e25742c
Merge pull request #263 from matter-labs/cargo_update 
chore: cargo deps update
 2025-02-10 19:58:55 +01:00
Harald Hoyer
45309e58f4
chore: cargo deps update 
with code fixes for the new versions.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
 2025-02-10 15:44:16 +01:00
Harald Hoyer
99ab2f2b76
Merge pull request #231 from matter-labs/renovate/enarx-spdx-digest 
chore(deps): update enarx/spdx digest to b5bfdd4
 2025-02-10 15:37:47 +01:00
renovate[bot]
49faaa984b
chore(deps): update enarx/spdx digest to b5bfdd4 2025-02-10 13:49:56 +00:00
Harald Hoyer
584a07defa
Merge pull request #243 from matter-labs/renovate/reqwest-0.x-lockfile 
chore(deps): update rust crate reqwest to v0.12.12
 2025-02-10 14:49:30 +01:00
renovate[bot]
7d01a240d4
chore(deps): update rust crate reqwest to v0.12.12 2025-02-10 13:37:44 +00:00
Harald Hoyer
7a33be4a68
Merge pull request #230 from matter-labs/renovate/actions-checkout-digest 
chore(deps): update actions/checkout digest to 11bd719
 2025-02-10 14:36:18 +01:00
renovate[bot]
01eac64182
chore(deps): update actions/checkout digest to 11bd719 2025-02-10 12:56:55 +00:00