Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-02-23 16:30:11 -05:00
Code Issues Packages Projects Releases Wiki Activity

Download v2.20.0 release measurements and check

Browse Source
This commit is contained in:
miampf 2025-01-28 15:05:12 +01:00
parent c209d44377
commit 5377d81026
No known key found for this signature in database
GPG Key ID: EF039364B5B6886C
1 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
.github/workflows/check-measurements-reproducibility.yml vendored
View File

@ -16,13 +16,20 @@ jobs:
uses: ./.github/actions/setup_bazel_nix
with:
useCache: "false"
nixTools: systemdUkify
# TODO: get correct path to bazel build artifacts, generate measurements and fetch released measurements, then compare.
nixTools: |
systemdUkify
jd-diff-patch
- name: Build images and produce measurements
run: |
# Build required binaries
bazel build //image/system:stable
bazel build //image/measured-boot/cmd
buildPath="$PWD/bazel-bin/image"
# create measurements
cd $(mktemp -d)
sudo env "PATH=$PATH" "$buildPath/measured-boot/cmd/cmd_/cmd" "$buildPath/system/qemu_qemu-vtpm_stable/constellation" ./measurements.json
cat ./measurements.json | jq
sudo env "PATH=$PATH" "$buildPath/measured-boot/cmd/cmd_/cmd" "$buildPath/system/qemu_qemu-vtpm_stable/constellation" ./own-measurements.json
# download release measurements and compare
curl -O https://cdn.confidential.cloud/constellation/v2/ref/-/stream/stable/v2.20.0/image/measurements.json
jd -set ./own-measurements.json ./measurements.json