AB#1770 (semi)automatic PCR updates (#7)

Signed-off-by: Daniel Weiße <dw@edgeless.systems>

util/pcr-reader/fetch_pcrs.sh

@@ -0,0 +1,41 @@
+#!/bin/bash
+
+set -o xtrace
+trap 'terminate $?' ERR
+
+terminate() {
+    echo "error: $1"
+    constellation terminate
+    popd || exit 1
+    exit 1
+}
+
+main() {
+    if ! command -v constellation &> /dev/null
+    then
+        echo "constellation is not in path"
+        exit 1
+    fi
+    if ! command -v go &> /dev/null
+    then
+        echo "go is not in path"
+        exit 1
+    fi
+
+    mkdir -p ./pcrs
+
+    # Fetch Azure PCRs
+    # TODO: Switch to confidential VMs
+    constellation create azure 2 Standard_D4s_v3 --name pcr-fetch -y
+    coord_ip=$(jq '.azurecoordinators | to_entries[] | select(.key|startswith("")) | .value.PublicIP' -rcM constellation-state.json)
+    go run main.go -coord-ip "${coord_ip}" -o ./pcrs/azure_pcrs.go
+    constellation terminate
+
+    # Fetch GCP PCRs
+    constellation create gcp 2 n2d-standard-2 --name pcr-fetch -y
+    coord_ip=$(jq '.gcpcoordinators | to_entries[] | select(.key|startswith("")) | .value.PublicIP' -rcM constellation-state.json)
+    go run main.go -coord-ip "${coord_ip}" -o ./pcrs/gcp_pcrs.go
+    constellation terminate
+}
+
+main