From 73fd1236df2fecccb93e52184c05573708ace2db Mon Sep 17 00:00:00 2001 From: miampf Date: Thu, 23 Jan 2025 14:22:02 +0100 Subject: [PATCH] compute measurements for single image --- .github/workflows/check-measurements-reproducibility.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/check-measurements-reproducibility.yml b/.github/workflows/check-measurements-reproducibility.yml index 53998a6de..578aca90a 100644 --- a/.github/workflows/check-measurements-reproducibility.yml +++ b/.github/workflows/check-measurements-reproducibility.yml @@ -16,8 +16,12 @@ jobs: uses: ./.github/actions/setup_bazel_nix with: useCache: "false" + # TODO: get correct path to bazel build artifacts, generate measurements and fetch released measurements, then compare. - name: Build images and produce measurements - # TODO: get correct path to bazel build artifacts, generate measurements and fetch released measurements, then compare. run: | bazel build //image/system:stable bazel build //image/measured-boot/cmd + buildPath="$PWD/bazel-bin/image" + cd $(mktemp -d) + sudo "$buildPath/measured-boot/cmd/cmd_/cmd" "$buildPath/ssystem/qemu_qemu-vtpm_stable/constellation" ./measurements.json + cat ./measurements.json | jq