don't fail on cleanup anymore

popd on exit

just copy everything

.bazelversion

@@ -1 +1 @@
-7.0.0
+7.1.0

.github/actions/e2e_benchmark/action.yml

@@ -49,7 +49,7 @@ runs:
         install kubestr /usr/local/bin
 
     - name: Checkout k8s-bench-suite
-      uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+      uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
       with:
         fetch-depth: 0
         repository: "edgelesssys/k8s-bench-suite"

.github/actions/e2e_lb/action.yml

@@ -21,7 +21,7 @@ runs:
       run: |
         kubectl apply -f ns.yml
         kubectl apply -f lb.yml
-        bazel run //e2e/internal/lb:lb_test
+        bazel run --test_timeout=14400 //e2e/internal/lb:lb_test
 
     - name: Test AWS Ingress
       if: inputs.cloudProvider == 'aws'

.github/actions/e2e_malicious_join/action.yml

@@ -32,7 +32,7 @@ runs:
         KUBECONFIG: ${{ inputs.kubeconfig }}
       working-directory: e2e/malicious-join
       run: |
-        bazel run //e2e/malicious-join:stamp_and_push
+        bazel run --test_timeout=14400 //e2e/malicious-join:stamp_and_push
         yq eval -i "(.spec.template.spec.containers[0].command) = \
           [ \"/malicious-join_bin\", \
           \"--js-endpoint=join-service.kube-system:9090\", \

.github/actions/e2e_mini/action.yml

@@ -11,6 +11,9 @@ inputs:
   azureTenantID:
     description: "Azure tenant to use for login with OIDC"
     required: true
+  azureIAMCredentials:
+    description: "Azure IAM credentials used for cleaning up resources"
+    required: true
   registry:
     description: "Container registry to use"
     required: true
@@ -38,9 +41,26 @@ runs:
 
     - name: MiniConstellation E2E
       shell: bash
+      id: e2e-test
       env:
         ARM_CLIENT_ID: ${{ inputs.azureClientID }}
         ARM_SUBSCRIPTION_ID: ${{ inputs.azureSubscriptionID }}
         ARM_TENANT_ID: ${{ inputs.azureTenantID }}
       run: |
-        bazel run //e2e/miniconstellation:push_remote_test
+        bazel run --test_timeout=14400 //e2e/miniconstellation:push_remote_test
+
+    - name: Log in to azure
+      # only log in if e2e test failed or if the run was cancelled
+      if: (failure() && steps.e2e-test.conclusion == 'failure') || cancelled()
+      uses: ./.github/actions/login_azure
+      with:
+        azure_credentials: ${{ inputs.azureIAMCredentials }}
+
+    - name: Clean up after failure
+      shell: bash
+      # clean up if e2e test failed or if the run was cancelled
+      if: (failure() && steps.e2e-test.conclusion == 'failure') || cancelled()
+      run: |
+        rg_name=${{ steps.e2e-test.outputs.rgname}}
+        echo "[*] Deleting resource group $rg_name"
+        az group delete -y --resource-group "$rg_name"

.github/actions/find_latest_image/action.yml

@@ -26,13 +26,13 @@ runs:
   steps:
     - name: Checkout head
       if: inputs.imageVersion == '' && inputs.git-ref == 'head'
-      uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+      uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
       with:
         ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 
     - name: Checkout ref
       if: inputs.imageVersion == '' && inputs.git-ref != 'head'
-      uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+      uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
       with:
         ref: ${{ inputs.git-ref }}
 

.github/actions/login_gcp/action.yml

@@ -20,7 +20,7 @@ runs:
         echo "GOOGLE_CLOUD_PROJECT=" >> "$GITHUB_ENV"
 
     - name: Authorize GCP access
-      uses: google-github-actions/auth@55bd3a7c6e2ae7cf1877fd1ccb9d54c0503c457c # v2.1.2
+      uses: google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa # v2.1.3
       with:
         workload_identity_provider: projects/796962942582/locations/global/workloadIdentityPools/constellation-ci-pool/providers/constellation-ci-provider
         service_account: ${{ inputs.service_account }}

.github/actions/publish_helmchart/action.yml

@@ -13,7 +13,7 @@ runs:
   using: "composite"
   steps:
     - name: Checkout
-      uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+      uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
       with:
         repository: edgelesssys/helm
         ref: main

.github/actions/setup_bazel_nix/action.yml

@@ -113,7 +113,7 @@ runs:
 
     - name: Install nix
       if: steps.check_inputs.outputs.nixPreinstalled == 'false'
-      uses: cachix/install-nix-action@6004951b182f8860210c8d6f0d808ec5b1a33d28 # v25
+      uses: cachix/install-nix-action@8887e596b4ee1134dae06b98d573bd674693f47c # v26
 
     - name: Set $USER if not set
       shell: bash

.github/workflows/assign_reviewer.yml

@@ -8,11 +8,11 @@ permissions:
   pull-requests: write
 
 jobs:
-  specific_review_requested:
+  assign_reviewer:
     runs-on: ubuntu-latest
-    if: ${{ github.event.label.name == 'dependencies'}}
+    if: github.event.label.name == 'dependencies' && github.event.pull_request.user.login == 'app/renovate'
     steps:
-    - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+    - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
     - name: Pick assignee
       id: pick-assignee
       uses: ./.github/actions/pick_assignee

.github/workflows/aws-snp-launchmeasurement.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
     - name: Checkout repository
-      uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+      uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
       with:
         ref: ${{ github.head_ref }}
         path: constellation
@@ -23,7 +23,7 @@ jobs:
         sudo python3 -m pip install --user --require-hashes -r constellation/.github/workflows/aws-snp-launchmeasurements-requirements.txt
 
     - name: Install Nix
-      uses: cachix/install-nix-action@6004951b182f8860210c8d6f0d808ec5b1a33d28 # v25
+      uses: cachix/install-nix-action@8887e596b4ee1134dae06b98d573bd674693f47c # v26
 
     - name: Download Firmware release
       id: download-firmware
@@ -50,7 +50,7 @@ jobs:
         echo "ovmfPath=${ovmfPath}" | tee -a "$GITHUB_OUTPUT"
         popd || exit 1
 
-    - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+    - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
       with:
         repository: virtee/sev-snp-measure-go.git
         ref: e42b6f8991ed5a671d5d1e02a6b61f6373f9f8d8

.github/workflows/build-binaries.yml

@@ -22,7 +22,7 @@ jobs:
     runs-on: [arc-runner-set]
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 

.github/workflows/build-ccm-gcp.yml

@@ -19,10 +19,10 @@ jobs:
       latest: ${{ steps.find-latest.outputs.latest }}
     steps:
       - name: Checkout Constellation
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
 
       - name: Checkout kubernetes/cloud-provider-gcp
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           repository: "kubernetes/cloud-provider-gcp"
           path: "cloud-provider-gcp"
@@ -65,10 +65,10 @@ jobs:
         version: ${{ fromJson(needs.find-ccm-versions.outputs.versions) }}
     steps:
       - name: Checkout Constellation
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
 
       - name: Checkout kubernetes/cloud-provider-gcp
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           repository: "kubernetes/cloud-provider-gcp"
           path: "cloud-provider-gcp"

.github/workflows/build-gcp-guest-agent.yml

@@ -69,7 +69,7 @@ jobs:
 
       - name: Checkout GoogleCloudPlatform/guest-agent
         if: steps.needs-build.outputs.out == 'true'
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           repository: "GoogleCloudPlatform/guest-agent"
           ref: refs/tags/${{ steps.latest-release.outputs.latest }}
@@ -77,7 +77,7 @@ jobs:
 
       - name: Checkout Constellation
         if: steps.needs-build.outputs.out == 'true'
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           path: "constellation"
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}

.github/workflows/build-libvirt-container.yml

@@ -19,7 +19,7 @@ jobs:
       packages: write
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
 
       - name: Setup bazel
         uses: ./.github/actions/setup_bazel_nix

.github/workflows/build-logcollector-images.yml

@@ -20,7 +20,7 @@ jobs:
     steps:
       - name: Check out repository
         id: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 

.github/workflows/build-os-image-scheduled.yml

@@ -62,7 +62,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ github.head_ref }}
 
@@ -121,7 +121,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ github.head_ref }}
 

.github/workflows/build-os-image.yml

@@ -59,7 +59,7 @@ jobs:
       cliApiBasePath: ${{ steps.image-version.outputs.cliApiBasePath }}
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ inputs.ref || github.head_ref }}
 
@@ -138,7 +138,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ inputs.ref || github.head_ref }}
 

.github/workflows/build-versionsapi-ci-image.yml

@@ -20,7 +20,7 @@ jobs:
     steps:
       - name: Check out repository
         id: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 

.github/workflows/check-links.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 

.github/workflows/codeql.yml

@@ -34,7 +34,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
 
       - name: Setup Go environment
         if: matrix.language == 'go'
@@ -44,7 +44,7 @@ jobs:
           cache: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@ceaec5c11a131e0d282ff3b6f095917d234caace # v2.25.3
+        uses: github/codeql-action/init@b7cec7526559c32f1616476ff32d17ba4c59b2d6 # v3.25.5
         with:
           languages: ${{ matrix.language }}
 
@@ -63,6 +63,6 @@ jobs:
           echo "::endgroup::"
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@ceaec5c11a131e0d282ff3b6f095917d234caace # v2.25.3
+        uses: github/codeql-action/analyze@b7cec7526559c32f1616476ff32d17ba4c59b2d6 # v3.25.5
         with:
           category: "/language:${{ matrix.language }}"

.github/workflows/docs-vale.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 

.github/workflows/draft-release.yml

@@ -72,7 +72,7 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ inputs.ref || github.head_ref }}
 
@@ -133,7 +133,7 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ inputs.ref || github.head_ref }}
 
@@ -169,7 +169,7 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ inputs.ref || github.head_ref }}
 
@@ -187,7 +187,7 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ inputs.ref || github.head_ref }}
 
@@ -219,7 +219,7 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ inputs.ref || github.head_ref }}
 
@@ -256,7 +256,7 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ inputs.ref || github.head_ref }}
 
@@ -316,7 +316,7 @@ jobs:
       - provenance-subjects
     # This must not be pinned to digest. See:
     # https://github.com/slsa-framework/slsa-github-generator#referencing-slsa-builders-and-generators
-    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.10.0
+    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
     with:
       base64-subjects: "${{ needs.provenance-subjects.outputs.provenance-subjects }}"
 
@@ -332,7 +332,7 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ inputs.ref || github.head_ref }}
 
@@ -345,9 +345,7 @@ jobs:
           name: constellation.spdx.sbom
 
       - name: Download provenance
-        # Need to use the same major version as slsa-github-generator to find uploaded artifacts
-        # https://github.com/slsa-framework/slsa-github-generator/issues/3068
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
         with:
           name: ${{ needs.provenance.outputs.provenance-name }}
 
@@ -407,7 +405,7 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ inputs.ref || github.head_ref }}
 
@@ -430,9 +428,7 @@ jobs:
           name: constellation.spdx.sbom.sig
 
       - name: Download Constellation provenance
-        # Need to use the same major version as slsa-github-generator to find uploaded artifacts
-        # https://github.com/slsa-framework/slsa-github-generator/issues/3068
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+        uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
         with:
           name: ${{ needs.provenance.outputs.provenance-name }}
 
@@ -476,7 +472,7 @@ jobs:
       - name: Create release with artifacts
         id: create-release
         # GitHub endorsed release project. See: https://github.com/actions/create-release
-        uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15
+        uses: softprops/action-gh-release@69320dbe05506a9a39fc8ae11030b214ec2d1f87 # v2.0.5
         with:
           draft: true
           generate_release_notes: true
@@ -491,7 +487,7 @@ jobs:
             terraform-module.zip
 
       - name: Create Terraform provider release with artifcats
-        uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15
+        uses: softprops/action-gh-release@69320dbe05506a9a39fc8ae11030b214ec2d1f87 # v2.0.5
         with:
           draft: true
           generate_release_notes: false

.github/workflows/e2e-attestationconfigapi.yml

@@ -26,7 +26,7 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           # Don't trigger in forks, use head on pull requests, use default otherwise.
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || github.event.pull_request.head.sha || '' }}

.github/workflows/e2e-cleanup-weekly.yml

@@ -14,7 +14,7 @@ jobs:
       id-token: write
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
 
       - name: Cleanup
         uses: ./.github/actions/e2e_cleanup_timeframe

.github/workflows/e2e-mini.yml

@@ -29,12 +29,12 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ inputs.ref || github.event.workflow_run.head_branch || github.head_ref }}
 
       - name: Azure login OIDC
-        uses: azure/login@cb79c773a3cfa27f31f25eb3f677781210c9ce3d # v1.6.1
+        uses: azure/login@6b2456866fc08b011acb422a92a4aa20e2c4de32 # v2.1.0
         with:
           client-id: ${{ secrets.AZURE_E2E_MINI_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}
@@ -46,5 +46,6 @@ jobs:
           azureClientID: ${{ secrets.AZURE_E2E_MINI_CLIENT_ID }}
           azureSubscriptionID: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
           azureTenantID: ${{ secrets.AZURE_TENANT_ID }}
+          azureIAMCredentials: ${{ secrets.AZURE_E2E_IAM_CREDENTIALS }}
           registry: ghcr.io
           githubToken: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/e2e-test-daily.yml

@@ -21,7 +21,7 @@ jobs:
       image-release-stable: ${{ steps.relabel-output.outputs.image-release-stable }}
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 
@@ -65,7 +65,7 @@ jobs:
     needs: [find-latest-image]
     steps:
       - name: Check out repository
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           fetch-depth: 0
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
@@ -164,12 +164,12 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 
       - name: Azure login OIDC
-        uses: azure/login@cb79c773a3cfa27f31f25eb3f677781210c9ce3d # v1.6.1
+        uses: azure/login@6b2456866fc08b011acb422a92a4aa20e2c4de32 # v2.1.0
         with:
           client-id: ${{ secrets.AZURE_E2E_MINI_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}

.github/workflows/e2e-test-provider-example.yml

@@ -71,7 +71,7 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ inputs.ref || github.head_ref }}
 
@@ -453,7 +453,7 @@ jobs:
             yq e '.nodeGroups.control_plane_default.zone = "eu-central-1a"' -i constellation-conf.yaml
             yq e '.nodeGroups.worker_default.zone = "eu-central-1a"' -i constellation-conf.yaml
           fi
-          KUBECONFIG=${{ github.workspace }}/cluster/constellation-admin.conf bazel run //e2e/provider-upgrade:provider-upgrade_test -- --want-worker "$WORKERNODES" --want-control "$CONTROLNODES" --cli "${{ github.workspace }}/build/constellation" "$IMAGE_FLAG" "$KUBERNETES_FLAG" "$MICROSERVICES_FLAG"
+          KUBECONFIG=${{ github.workspace }}/cluster/constellation-admin.conf bazel run --test_timeout=14400 //e2e/provider-upgrade:provider-upgrade_test -- --want-worker "$WORKERNODES" --want-control "$CONTROLNODES" --cli "${{ github.workspace }}/build/constellation" "$IMAGE_FLAG" "$KUBERNETES_FLAG" "$MICROSERVICES_FLAG"
 
       - name: Destroy Terraform Cluster
         # outcome is part of the steps context (https://docs.github.com/en/actions/learn-github-actions/contexts#steps-context)

.github/workflows/e2e-test-release.yml

@@ -311,7 +311,7 @@ jobs:
         run: brew install coreutils kubectl bash
 
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           fetch-depth: 0
           ref: ${{ inputs.ref || github.head_ref }}

.github/workflows/e2e-test-weekly.yml

@@ -22,7 +22,7 @@ jobs:
       image-main-nightly: ${{ steps.relabel-output.outputs.image-main-nightly }}
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 
@@ -313,7 +313,7 @@ jobs:
     needs: [find-latest-image]
     steps:
       - name: Check out repository
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           fetch-depth: 0
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
@@ -437,12 +437,12 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 
       - name: Azure login OIDC
-        uses: azure/login@cb79c773a3cfa27f31f25eb3f677781210c9ce3d # v1.6.1
+        uses: azure/login@6b2456866fc08b011acb422a92a4aa20e2c4de32 # v2.1.0
         with:
           client-id: ${{ secrets.AZURE_E2E_MINI_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}

.github/workflows/e2e-test.yml

@@ -174,13 +174,13 @@ jobs:
     steps:
       - name: Checkout head
         if: inputs.git-ref == 'head'
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 
       - name: Checkout ref
         if: inputs.git-ref != 'head'
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ inputs.git-ref }}
 
@@ -211,13 +211,13 @@ jobs:
 
       - name: Checkout head
         if: inputs.git-ref == 'head'
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 
       - name: Checkout ref
         if: inputs.git-ref != 'head'
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ inputs.git-ref }}
 

.github/workflows/e2e-upgrade.yml

@@ -135,14 +135,14 @@ jobs:
     steps:
       - name: Checkout
         if: inputs.gitRef == 'head'
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           fetch-depth: 0
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 
       - name: Checkout ref
         if: inputs.gitRef != 'head'
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           fetch-depth: 0
           ref: ${{ inputs.gitRef }}
@@ -190,14 +190,14 @@ jobs:
     steps:
       - name: Checkout
         if: inputs.gitRef == 'head'
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           fetch-depth: 0
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 
       - name: Checkout ref
         if: inputs.gitRef != 'head'
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           fetch-depth: 0
           ref: ${{ inputs.gitRef }}
@@ -274,14 +274,14 @@ jobs:
     steps:
       - name: Checkout
         if: inputs.gitRef == 'head'
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           fetch-depth: 0
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 
       - name: Checkout ref
         if: inputs.gitRef != 'head'
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           fetch-depth: 0
           ref: ${{ inputs.gitRef }}
@@ -402,7 +402,7 @@ jobs:
           fi
 
           sudo sh -c 'echo "127.0.0.1 license.confidential.cloud" >> /etc/hosts'
-          bazel run //e2e/internal/upgrade:upgrade_test -- --want-worker "$WORKERNODES" --want-control "$CONTROLNODES" --target-image "$IMAGE" "$KUBERNETES_FLAG" "$MICROSERVICES_FLAG"
+          bazel run --test_timeout=14400 //e2e/internal/upgrade:upgrade_test -- --want-worker "$WORKERNODES" --want-control "$CONTROLNODES" --target-image "$IMAGE" "$KUBERNETES_FLAG" "$MICROSERVICES_FLAG"
 
       - name: Remove Terraform plugin cache
         if: always()
@@ -438,14 +438,14 @@ jobs:
     steps:
       - name: Checkout
         if: inputs.gitRef == 'head'
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           fetch-depth: 0
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 
       - name: Checkout ref
         if: inputs.gitRef != 'head'
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           fetch-depth: 0
           ref: ${{ inputs.gitRef }}

.github/workflows/e2e-windows.yml

@@ -21,7 +21,7 @@ jobs:
       packages: write
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 
@@ -56,7 +56,7 @@ jobs:
     needs: build-cli
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 
@@ -186,7 +186,7 @@ jobs:
       inputs.scheduled
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 

.github/workflows/on-release.yml

@@ -26,7 +26,7 @@ jobs:
       WORKING_BRANCH: ${{ env.WORKING_BRANCH }}
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           fetch-depth: 0 # fetch all history
 
@@ -49,7 +49,7 @@ jobs:
       latest: ${{ steps.input-passthrough.outputs.latest }}${{ steps.check-last-release.outputs.latest }}
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
 
       - name: Override latest
         if: github.event.inputs.latest == 'true'
@@ -123,7 +123,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
 
       - name: Remove temporary branch
         run: git push origin --delete "${{needs.complete-release-branch-transaction.outputs.WORKING_BRANCH}}"
@@ -137,7 +137,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
 
       - uses: ./.github/actions/setup_bazel_nix
 

.github/workflows/purge-main.yml

@@ -18,7 +18,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ github.head_ref }}
 

.github/workflows/release.yml

@@ -33,7 +33,7 @@ jobs:
       RELEASE_BRANCH: ${{ steps.version-info.outputs.RELEASE_BRANCH }}
       WORKING_BRANCH: ${{ steps.version-info.outputs.WORKING_BRANCH }}
     steps:
-      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
 
       - name: Working branch
         run: echo "WORKING_BRANCH=$(git branch --show-current)" | tee -a "$GITHUB_ENV"
@@ -85,7 +85,7 @@ jobs:
       MAJOR_MINOR: ${{ needs.verify-inputs.outputs.MAJOR_MINOR }}
       BRANCH: docs/${{ needs.verify-inputs.outputs.MAJOR_MINOR }}
     steps:
-      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: main
 
@@ -123,7 +123,7 @@ jobs:
       WORKING_BRANCH: ${{ needs.verify-inputs.outputs.WORKING_BRANCH }}
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ needs.verify-inputs.outputs.WORKING_BRANCH }}
 
@@ -161,7 +161,7 @@ jobs:
       WITHOUT_V: ${{ needs.verify-inputs.outputs.WITHOUT_V }}
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ needs.verify-inputs.outputs.WORKING_BRANCH }}
 
@@ -181,7 +181,7 @@ jobs:
           yq eval -i ".version = \"$WITHOUT_V\"" s3proxy/deploy/s3proxy/Chart.yaml
           yq eval -i ".image = \"ghcr.io/edgelesssys/constellation/s3proxy:$VERSION\"" s3proxy/deploy/s3proxy/values.yaml
 
-          git add s3proxy/deploy/s3proxy/Chart.yaml
+          git add s3proxy/deploy/s3proxy/Chart.yaml s3proxy/deploy/s3proxy/values.yaml
 
       - name: Commit
         run: |
@@ -226,7 +226,7 @@ jobs:
       WITHOUT_V: ${{ needs.verify-inputs.outputs.WITHOUT_V }}
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ needs.verify-inputs.outputs.WORKING_BRANCH }}
 

.github/workflows/reproducible-builds.yml

@@ -31,7 +31,7 @@ jobs:
     runs-on: ${{ matrix.runner }}
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 
@@ -84,7 +84,7 @@ jobs:
     runs-on: ${{ matrix.runner }}
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 
@@ -134,7 +134,7 @@ jobs:
             - "cli_enterprise_windows_amd64"
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 
@@ -168,7 +168,7 @@ jobs:
               - "gcp_gcp-sev-snp_nightly"
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 

.github/workflows/scorecard.yml

@@ -18,12 +18,12 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           persist-credentials: false
 
       - name: Run analysis
-        uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1
+        uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 # v2.3.3
         with:
           results_file: results.sarif
           results_format: sarif
@@ -37,6 +37,6 @@ jobs:
           retention-days: 5
 
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@ceaec5c11a131e0d282ff3b6f095917d234caace # v2.25.3
+        uses: github/codeql-action/upload-sarif@b7cec7526559c32f1616476ff32d17ba4c59b2d6 # v3.25.5
         with:
           sarif_file: results.sarif

.github/workflows/sync-terraform-docs.yml

@@ -18,14 +18,14 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout constellation repo
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
           fetch-depth: 0
           path: constellation
 
       - name: Checkout terraform-provider-constellation repo
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           repository: edgelesssys/terraform-provider-constellation
           ref: main

.github/workflows/test-integration.yml

@@ -25,7 +25,7 @@ jobs:
       CTEST_OUTPUT_ON_FAILURE: True
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 

.github/workflows/test-operator-codegen.yml

@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 

.github/workflows/test-tfsec.yml

@@ -23,7 +23,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 

.github/workflows/test-tidy.yml

@@ -17,7 +17,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
           # No token available for forks, so we can't push changes

.github/workflows/test-unittest.yml

@@ -30,7 +30,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
           fetch-depth: 0

.github/workflows/update-rpms.yml

@@ -13,7 +13,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
 
       - name: Assume AWS role to upload Bazel dependencies to S3
         uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2

.github/workflows/versionsapi.yml

@@ -115,7 +115,7 @@ jobs:
     steps:
       - name: Check out repository
         id: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
         with:
           ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
 

.golangci.yml

@@ -4,11 +4,11 @@ run:
     - integration
     - e2e
   modules-download-mode: readonly
-  skip-dirs:
-    - 3rdparty/node-maintenance-operator
 
 output:
-  format: tab
+  formats:
+    - format: tab
+      path: stdout
   sort-results: true
 
 linters:
@@ -38,6 +38,8 @@ linters:
 issues:
   max-issues-per-linter: 0
   max-same-issues: 20
+  exclude-dirs:
+    - 3rdparty/node-maintenance-operator
   include:
     - EXC0012
     - EXC0014

3rdparty/gcp-guest-agent/Dockerfile

@@ -1,4 +1,4 @@
-FROM ubuntu:22.04@sha256:2b7412e6465c3c7fc5bb21d3e6f1917c167358449fecac8176c6e496e5c1f05f as build
+FROM ubuntu:22.04@sha256:a6d2b38300ce017add71440577d5b0a90460d0e57fd7aec21dd0d1b0761bbfb2 as build
 
 # Install packages
 RUN apt-get update && apt-get install -y \

bazel/toolchains/aspect_bazel_lib.bzl

@@ -5,11 +5,11 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 def aspect_bazel_lib():
     http_archive(
         name = "aspect_bazel_lib",
-        sha256 = "979667bb7276ee8fcf2c114c9be9932b9a3052a64a647e0dcaacfb9c0016f0a3",
-        strip_prefix = "bazel-lib-2.4.1",
+        sha256 = "87ab4ec479ebeb00d286266aca2068caeef1bb0b1765e8f71c7b6cfee6af4226",
+        strip_prefix = "bazel-lib-2.7.3",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/979667bb7276ee8fcf2c114c9be9932b9a3052a64a647e0dcaacfb9c0016f0a3",
-            "https://github.com/aspect-build/bazel-lib/releases/download/v2.4.1/bazel-lib-v2.4.1.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/87ab4ec479ebeb00d286266aca2068caeef1bb0b1765e8f71c7b6cfee6af4226",
+            "https://github.com/aspect-build/bazel-lib/releases/download/v2.7.3/bazel-lib-v2.7.3.tar.gz",
         ],
         type = "tar.gz",
     )

bazel/toolchains/buildifier_deps.bzl

@@ -5,11 +5,11 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 def buildifier_deps():
     http_archive(
         name = "com_github_bazelbuild_buildtools",
-        strip_prefix = "buildtools-6.4.0",
+        strip_prefix = "buildtools-7.1.1",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/05c3c3602d25aeda1e9dbc91d3b66e624c1f9fdadf273e5480b489e744ca7269",
-            "https://github.com/bazelbuild/buildtools/archive/refs/tags/v6.4.0.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/60a9025072ae237f325d0e7b661e1685f34922c29883888c2d06f5789462b939",
+            "https://github.com/bazelbuild/buildtools/archive/refs/tags/v7.1.1.tar.gz",
         ],
         type = "tar.gz",
-        sha256 = "05c3c3602d25aeda1e9dbc91d3b66e624c1f9fdadf273e5480b489e744ca7269",
+        sha256 = "60a9025072ae237f325d0e7b661e1685f34922c29883888c2d06f5789462b939",
     )

bazel/toolchains/ci_deps.bzl

@@ -19,33 +19,33 @@ def _shellcheck_deps():
     http_archive(
         name = "com_github_koalaman_shellcheck_linux_amd64",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/700324c6dd0ebea0117591c6cc9d7350d9c7c5c287acbad7630fa17b1d4d9e2f",
-            "https://github.com/koalaman/shellcheck/releases/download/v0.9.0/shellcheck-v0.9.0.linux.x86_64.tar.xz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/6c881ab0698e4e6ea235245f22832860544f17ba386442fe7e9d629f8cbedf87",
+            "https://github.com/koalaman/shellcheck/releases/download/v0.10.0/shellcheck-v0.10.0.linux.x86_64.tar.xz",
         ],
-        sha256 = "700324c6dd0ebea0117591c6cc9d7350d9c7c5c287acbad7630fa17b1d4d9e2f",
-        strip_prefix = "shellcheck-v0.9.0",
+        sha256 = "6c881ab0698e4e6ea235245f22832860544f17ba386442fe7e9d629f8cbedf87",
+        strip_prefix = "shellcheck-v0.10.0",
         build_file_content = """exports_files(["shellcheck"], visibility = ["//visibility:public"])""",
         type = "tar.xz",
     )
     http_archive(
         name = "com_github_koalaman_shellcheck_linux_arm64",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/179c579ef3481317d130adebede74a34dbbc2df961a70916dd4039ebf0735fae",
-            "https://github.com/koalaman/shellcheck/releases/download/v0.9.0/shellcheck-v0.9.0.linux.aarch64.tar.xz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/324a7e89de8fa2aed0d0c28f3dab59cf84c6d74264022c00c22af665ed1a09bb",
+            "https://github.com/koalaman/shellcheck/releases/download/v0.10.0/shellcheck-v0.10.0.linux.aarch64.tar.xz",
         ],
-        sha256 = "179c579ef3481317d130adebede74a34dbbc2df961a70916dd4039ebf0735fae",
-        strip_prefix = "shellcheck-v0.9.0",
+        sha256 = "324a7e89de8fa2aed0d0c28f3dab59cf84c6d74264022c00c22af665ed1a09bb",
+        strip_prefix = "shellcheck-v0.10.0",
         build_file_content = """exports_files(["shellcheck"], visibility = ["//visibility:public"])""",
         type = "tar.xz",
     )
     http_archive(
         name = "com_github_koalaman_shellcheck_darwin_amd64",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/7d3730694707605d6e60cec4efcb79a0632d61babc035aa16cda1b897536acf5",
-            "https://github.com/koalaman/shellcheck/releases/download/v0.9.0/shellcheck-v0.9.0.darwin.x86_64.tar.xz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/ef27684f23279d112d8ad84e0823642e43f838993bbb8c0963db9b58a90464c2",
+            "https://github.com/koalaman/shellcheck/releases/download/v0.10.0/shellcheck-v0.10.0.darwin.x86_64.tar.xz",
         ],
-        sha256 = "7d3730694707605d6e60cec4efcb79a0632d61babc035aa16cda1b897536acf5",
-        strip_prefix = "shellcheck-v0.9.0",
+        sha256 = "ef27684f23279d112d8ad84e0823642e43f838993bbb8c0963db9b58a90464c2",
+        strip_prefix = "shellcheck-v0.10.0",
         build_file_content = """exports_files(["shellcheck"], visibility = ["//visibility:public"])""",
         type = "tar.xz",
     )
@@ -97,41 +97,41 @@ def _actionlint_deps():
         name = "com_github_rhysd_actionlint_linux_amd64",
         build_file_content = """exports_files(["actionlint"], visibility = ["//visibility:public"])""",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/f0294c342af98fad4ff917bc32032f28e1b55f76aedf291886ec10bbed7c12e1",
-            "https://github.com/rhysd/actionlint/releases/download/v1.6.26/actionlint_1.6.26_linux_amd64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/8aae9148f61952d11a97651852fdc7dffd2b762ed3cdd28b3c2232ae5f55d4db",
+            "https://github.com/rhysd/actionlint/releases/download/v1.7.0/actionlint_1.7.0_linux_amd64.tar.gz",
         ],
         type = "tar.gz",
-        sha256 = "f0294c342af98fad4ff917bc32032f28e1b55f76aedf291886ec10bbed7c12e1",
+        sha256 = "8aae9148f61952d11a97651852fdc7dffd2b762ed3cdd28b3c2232ae5f55d4db",
     )
     http_archive(
         name = "com_github_rhysd_actionlint_linux_arm64",
         build_file_content = """exports_files(["actionlint"], visibility = ["//visibility:public"])""",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/a1056d85d614af4f6e5517ed2911dab2621b8e97c368c8b265328f9c22801648",
-            "https://github.com/rhysd/actionlint/releases/download/v1.6.26/actionlint_1.6.26_linux_arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/8181452246e7e6310b988f83762fc982e03f27eeb53dd4ad33fa4a5f4276b383",
+            "https://github.com/rhysd/actionlint/releases/download/v1.7.0/actionlint_1.7.0_linux_arm64.tar.gz",
         ],
         type = "tar.gz",
-        sha256 = "a1056d85d614af4f6e5517ed2911dab2621b8e97c368c8b265328f9c22801648",
+        sha256 = "8181452246e7e6310b988f83762fc982e03f27eeb53dd4ad33fa4a5f4276b383",
     )
     http_archive(
         name = "com_github_rhysd_actionlint_darwin_amd64",
         build_file_content = """exports_files(["actionlint"], visibility = ["//visibility:public"])""",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/bfa890e77a8508603c785af09a30bbab3a3255d291d8d27efc3f20ac8e303a8e",
-            "https://github.com/rhysd/actionlint/releases/download/v1.6.26/actionlint_1.6.26_darwin_amd64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/138aff674f31bd218030d4b00b3024bf0c721b75a7ec8e90b743763f81e3128e",
+            "https://github.com/rhysd/actionlint/releases/download/v1.7.0/actionlint_1.7.0_darwin_amd64.tar.gz",
         ],
         type = "tar.gz",
-        sha256 = "bfa890e77a8508603c785af09a30bbab3a3255d291d8d27efc3f20ac8e303a8e",
+        sha256 = "138aff674f31bd218030d4b00b3024bf0c721b75a7ec8e90b743763f81e3128e",
     )
     http_archive(
         name = "com_github_rhysd_actionlint_darwin_arm64",
         build_file_content = """exports_files(["actionlint"], visibility = ["//visibility:public"])""",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/5e131ab7de7ad051e1923b80d167aaa414734e97c720698c48778250e1dd2590",
-            "https://github.com/rhysd/actionlint/releases/download/v1.6.26/actionlint_1.6.26_darwin_arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/806e73fbafe54b7324d9478798534c5195fb71ea171633d9035b3fca237addd3",
+            "https://github.com/rhysd/actionlint/releases/download/v1.7.0/actionlint_1.7.0_darwin_arm64.tar.gz",
         ],
         type = "tar.gz",
-        sha256 = "5e131ab7de7ad051e1923b80d167aaa414734e97c720698c48778250e1dd2590",
+        sha256 = "806e73fbafe54b7324d9478798534c5195fb71ea171633d9035b3fca237addd3",
     )
 
 def _gofumpt_deps():
@@ -181,41 +181,41 @@ def _tfsec_deps():
         name = "com_github_aquasecurity_tfsec_linux_amd64",
         build_file_content = """exports_files(["tfsec"], visibility = ["//visibility:public"])""",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/21201f1615de0b4c143eba2da0f988bab3f68184646090b30ece1fdb501396ca",
-            "https://github.com/aquasecurity/tfsec/releases/download/v1.28.5/tfsec_1.28.5_linux_amd64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/8cbd8d64cbd1f25b38f33fa04db602466dade79e99c99dc9da053b5962d34014",
+            "https://github.com/aquasecurity/tfsec/releases/download/v1.28.6/tfsec_1.28.6_linux_amd64.tar.gz",
         ],
         type = "tar.gz",
-        sha256 = "21201f1615de0b4c143eba2da0f988bab3f68184646090b30ece1fdb501396ca",
+        sha256 = "8cbd8d64cbd1f25b38f33fa04db602466dade79e99c99dc9da053b5962d34014",
     )
     http_archive(
         name = "com_github_aquasecurity_tfsec_linux_arm64",
         build_file_content = """exports_files(["tfsec"], visibility = ["//visibility:public"])""",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/a587a9cd879240074551067114b8f63d2249aab70cabf8f8d6884e2b67cfddad",
-            "https://github.com/aquasecurity/tfsec/releases/download/v1.28.5/tfsec_1.28.5_linux_arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/4bc7b0f0592be4fa384cff52af5b1cdd2066ba7a06001bea98690340851c0bce",
+            "https://github.com/aquasecurity/tfsec/releases/download/v1.28.6/tfsec_1.28.6_linux_arm64.tar.gz",
         ],
         type = "tar.gz",
-        sha256 = "a587a9cd879240074551067114b8f63d2249aab70cabf8f8d6884e2b67cfddad",
+        sha256 = "4bc7b0f0592be4fa384cff52af5b1cdd2066ba7a06001bea98690340851c0bce",
     )
     http_archive(
         name = "com_github_aquasecurity_tfsec_darwin_amd64",
         build_file_content = """exports_files(["tfsec"], visibility = ["//visibility:public"])""",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/4ad9a313d84aa11893672c7779a99f85a6acaab26c5a05ccc432db08bc4c0a37",
-            "https://github.com/aquasecurity/tfsec/releases/download/v1.28.5/tfsec_1.28.5_darwin_amd64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/3b31e954819faa7d6151b999548cefb782f2f4dc64b355c8747e44d4b0b2faca",
+            "https://github.com/aquasecurity/tfsec/releases/download/v1.28.6/tfsec_1.28.6_darwin_amd64.tar.gz",
         ],
         type = "tar.gz",
-        sha256 = "4ad9a313d84aa11893672c7779a99f85a6acaab26c5a05ccc432db08bc4c0a37",
+        sha256 = "3b31e954819faa7d6151b999548cefb782f2f4dc64b355c8747e44d4b0b2faca",
     )
     http_archive(
         name = "com_github_aquasecurity_tfsec_darwin_arm64",
         build_file_content = """exports_files(["tfsec"], visibility = ["//visibility:public"])""",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/50117ac409bb3c1101453d74f48a639c7ab7ac2f40b023eb7004d84048913888",
-            "https://github.com/aquasecurity/tfsec/releases/download/v1.28.5/tfsec_1.28.5_darwin_arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/aa132b7e0e69e16f1c9320257841751e52c42d9791b7f900de72cf0b06ffe74c",
+            "https://github.com/aquasecurity/tfsec/releases/download/v1.28.6/tfsec_1.28.6_darwin_arm64.tar.gz",
         ],
         type = "tar.gz",
-        sha256 = "50117ac409bb3c1101453d74f48a639c7ab7ac2f40b023eb7004d84048913888",
+        sha256 = "aa132b7e0e69e16f1c9320257841751e52c42d9791b7f900de72cf0b06ffe74c",
     )
 
 def _golangci_lint_deps():
@@ -223,45 +223,45 @@ def _golangci_lint_deps():
         name = "com_github_golangci_golangci_lint_linux_amd64",
         build_file = "//bazel/toolchains:BUILD.golangci.bazel",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/e1c313fb5fc85a33890fdee5dbb1777d1f5829c84d655a47a55688f3aad5e501",
-            "https://github.com/golangci/golangci-lint/releases/download/v1.56.2/golangci-lint-1.56.2-linux-amd64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/2e7c1b2af70ecb7ce18da79a3951db7046dcb709566c018fb93c61e8733b2239",
+            "https://github.com/golangci/golangci-lint/releases/download/v1.58.1/golangci-lint-1.58.1-linux-amd64.tar.gz",
         ],
-        strip_prefix = "golangci-lint-1.56.2-linux-amd64",
+        strip_prefix = "golangci-lint-1.58.1-linux-amd64",
         type = "tar.gz",
-        sha256 = "e1c313fb5fc85a33890fdee5dbb1777d1f5829c84d655a47a55688f3aad5e501",
+        sha256 = "2e7c1b2af70ecb7ce18da79a3951db7046dcb709566c018fb93c61e8733b2239",
     )
     http_archive(
         name = "com_github_golangci_golangci_lint_linux_arm64",
         build_file = "//bazel/toolchains:BUILD.golangci.bazel",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/0041594fde41ce43b75e65476a050fe9057881d8b5bccd472f18357e2ead3e04",
-            "https://github.com/golangci/golangci-lint/releases/download/v1.56.2/golangci-lint-1.56.2-linux-arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/e78f55156ef7f8bd4a746aa695c6bd299dc0aa71b91ec066680d2c59e443708b",
+            "https://github.com/golangci/golangci-lint/releases/download/v1.58.1/golangci-lint-1.58.1-linux-arm64.tar.gz",
         ],
-        strip_prefix = "golangci-lint-1.56.2-linux-arm64",
+        strip_prefix = "golangci-lint-1.58.1-linux-arm64",
         type = "tar.gz",
-        sha256 = "0041594fde41ce43b75e65476a050fe9057881d8b5bccd472f18357e2ead3e04",
+        sha256 = "e78f55156ef7f8bd4a746aa695c6bd299dc0aa71b91ec066680d2c59e443708b",
     )
     http_archive(
         name = "com_github_golangci_golangci_lint_darwin_amd64",
         build_file = "//bazel/toolchains:BUILD.golangci.bazel",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/15c4d19a2c85a04f67779047dbb9467ba176c71fff762a0d514a21bb75e4b42c",
-            "https://github.com/golangci/golangci-lint/releases/download/v1.56.2/golangci-lint-1.56.2-darwin-amd64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/79f587134955808e245aa78a734bc28f6e03fc42efb3e91d2a705930909fe0c0",
+            "https://github.com/golangci/golangci-lint/releases/download/v1.58.1/golangci-lint-1.58.1-darwin-amd64.tar.gz",
         ],
-        strip_prefix = "golangci-lint-1.56.2-darwin-amd64",
+        strip_prefix = "golangci-lint-1.58.1-darwin-amd64",
         type = "tar.gz",
-        sha256 = "15c4d19a2c85a04f67779047dbb9467ba176c71fff762a0d514a21bb75e4b42c",
+        sha256 = "79f587134955808e245aa78a734bc28f6e03fc42efb3e91d2a705930909fe0c0",
     )
     http_archive(
         name = "com_github_golangci_golangci_lint_darwin_arm64",
         build_file = "//bazel/toolchains:BUILD.golangci.bazel",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/5f9ecda712c7ae08fbf872336fae3db866720e5865903d4c53903184b2a2c2dc",
-            "https://github.com/golangci/golangci-lint/releases/download/v1.56.2/golangci-lint-1.56.2-darwin-arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/bd59615a2fdf8e8ff544ba79e15c53f81a538bd68cccf52f4802b65e0216199d",
+            "https://github.com/golangci/golangci-lint/releases/download/v1.58.1/golangci-lint-1.58.1-darwin-arm64.tar.gz",
         ],
-        strip_prefix = "golangci-lint-1.56.2-darwin-arm64",
+        strip_prefix = "golangci-lint-1.58.1-darwin-arm64",
         type = "tar.gz",
-        sha256 = "5f9ecda712c7ae08fbf872336fae3db866720e5865903d4c53903184b2a2c2dc",
+        sha256 = "bd59615a2fdf8e8ff544ba79e15c53f81a538bd68cccf52f4802b65e0216199d",
     )
 
 def _buf_deps():
@@ -270,44 +270,44 @@ def _buf_deps():
         strip_prefix = "buf/bin",
         build_file_content = """exports_files(["buf"], visibility = ["//visibility:public"])""",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/1033f26361e6fc30ffcfab9d4e4274ffd4af88d9c97de63d2e1721c4a07c1380",
-            "https://github.com/bufbuild/buf/releases/download/v1.29.0/buf-Linux-x86_64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/8a94dce37ce72c89c82e6c4baf77797a2a4a2eef3b02a7f39b40ef7fb0f39f94",
+            "https://github.com/bufbuild/buf/releases/download/v1.31.0/buf-Linux-x86_64.tar.gz",
         ],
         type = "tar.gz",
-        sha256 = "1033f26361e6fc30ffcfab9d4e4274ffd4af88d9c97de63d2e1721c4a07c1380",
+        sha256 = "8a94dce37ce72c89c82e6c4baf77797a2a4a2eef3b02a7f39b40ef7fb0f39f94",
     )
     http_archive(
         name = "com_github_bufbuild_buf_linux_arm64",
         strip_prefix = "buf/bin",
         build_file_content = """exports_files(["buf"], visibility = ["//visibility:public"])""",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/a725e0ab1c6b1e97b31f9d1d946f8b1d56586a96715fae4a7ecc88b6cf601cea",
-            "https://github.com/bufbuild/buf/releases/download/v1.29.0/buf-Linux-aarch64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/ed435fe40a8b719354f746261cf9dbfcbfa4165fdb600e2f324ad8f6fe488dd2",
+            "https://github.com/bufbuild/buf/releases/download/v1.31.0/buf-Linux-aarch64.tar.gz",
         ],
         type = "tar.gz",
-        sha256 = "a725e0ab1c6b1e97b31f9d1d946f8b1d56586a96715fae4a7ecc88b6cf601cea",
+        sha256 = "ed435fe40a8b719354f746261cf9dbfcbfa4165fdb600e2f324ad8f6fe488dd2",
     )
     http_archive(
         name = "com_github_bufbuild_buf_darwin_amd64",
         strip_prefix = "buf/bin",
         build_file_content = """exports_files(["buf"], visibility = ["//visibility:public"])""",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/7ec6c2fd8f7e5e2ddba1e9ebff51eb9b0d6b67b85e105138dd064057c7b32db8",
-            "https://github.com/bufbuild/buf/releases/download/v1.29.0/buf-Darwin-x86_64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/a88b4ccf6aee4f7d525917bf4636253faa7c13b8f45c4c732a7fea55441ef835",
+            "https://github.com/bufbuild/buf/releases/download/v1.31.0/buf-Darwin-x86_64.tar.gz",
         ],
         type = "tar.gz",
-        sha256 = "7ec6c2fd8f7e5e2ddba1e9ebff51eb9b0d6b67b85e105138dd064057c7b32db8",
+        sha256 = "a88b4ccf6aee4f7d525917bf4636253faa7c13b8f45c4c732a7fea55441ef835",
     )
     http_archive(
         name = "com_github_bufbuild_buf_darwin_arm64",
         strip_prefix = "buf/bin",
         build_file_content = """exports_files(["buf"], visibility = ["//visibility:public"])""",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/b97225a3b3f18bdabb36e83d9aba2e6419ead0c6ca0894d10a95517be5fd302f",
-            "https://github.com/bufbuild/buf/releases/download/v1.29.0/buf-Darwin-arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/7519df87d3f681d5348f00e96215543edc55c62d821527056b5d8201d8982f28",
+            "https://github.com/bufbuild/buf/releases/download/v1.31.0/buf-Darwin-arm64.tar.gz",
         ],
         type = "tar.gz",
-        sha256 = "b97225a3b3f18bdabb36e83d9aba2e6419ead0c6ca0894d10a95517be5fd302f",
+        sha256 = "7519df87d3f681d5348f00e96215543edc55c62d821527056b5d8201d8982f28",
     )
 
 def _talos_docgen_deps():
@@ -351,46 +351,46 @@ def _talos_docgen_deps():
 def _helm_deps():
     http_archive(
         name = "com_github_helm_helm_linux_amd64",
-        sha256 = "f43e1c3387de24547506ab05d24e5309c0ce0b228c23bd8aa64e9ec4b8206651",
+        sha256 = "a5844ef2c38ef6ddf3b5a8f7d91e7e0e8ebc39a38bb3fc8013d629c1ef29c259",
         strip_prefix = "linux-amd64",
         build_file_content = """exports_files(["helm"], visibility = ["//visibility:public"])""",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/f43e1c3387de24547506ab05d24e5309c0ce0b228c23bd8aa64e9ec4b8206651",
-            "https://get.helm.sh/helm-v3.14.0-linux-amd64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/a5844ef2c38ef6ddf3b5a8f7d91e7e0e8ebc39a38bb3fc8013d629c1ef29c259",
+            "https://get.helm.sh/helm-v3.14.4-linux-amd64.tar.gz",
         ],
         type = "tar.gz",
     )
     http_archive(
         name = "com_github_helm_helm_linux_arm64",
-        sha256 = "b29e61674731b15f6ad3d1a3118a99d3cc2ab25a911aad1b8ac8c72d5a9d2952",
+        sha256 = "113ccc53b7c57c2aba0cd0aa560b5500841b18b5210d78641acfddc53dac8ab2",
         strip_prefix = "linux-arm64",
         build_file_content = """exports_files(["helm"], visibility = ["//visibility:public"])""",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/b29e61674731b15f6ad3d1a3118a99d3cc2ab25a911aad1b8ac8c72d5a9d2952",
-            "https://get.helm.sh/helm-v3.14.0-linux-arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/113ccc53b7c57c2aba0cd0aa560b5500841b18b5210d78641acfddc53dac8ab2",
+            "https://get.helm.sh/helm-v3.14.4-linux-arm64.tar.gz",
         ],
         type = "tar.gz",
     )
     http_archive(
         name = "com_github_helm_helm_darwin_amd64",
-        sha256 = "804586896496f7b3da97f56089ea00f220e075e969b6fdf6c0b7b9cdc22de120",
+        sha256 = "73434aeac36ad068ce2e5582b8851a286dc628eae16494a26e2ad0b24a7199f9",
         strip_prefix = "darwin-amd64",
         build_file_content = """exports_files(["helm"], visibility = ["//visibility:public"])""",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/804586896496f7b3da97f56089ea00f220e075e969b6fdf6c0b7b9cdc22de120",
-            "https://get.helm.sh/helm-v3.14.0-darwin-amd64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/73434aeac36ad068ce2e5582b8851a286dc628eae16494a26e2ad0b24a7199f9",
+            "https://get.helm.sh/helm-v3.14.4-darwin-amd64.tar.gz",
         ],
         type = "tar.gz",
     )
     http_archive(
         name = "com_github_helm_helm_darwin_arm64",
-        sha256 = "c2f36f3289a01c7c93ca11f84d740a170e0af1d2d0280bd523a409a62b8dfa1d",
+        sha256 = "61e9c5455f06b2ad0a1280975bf65892e707adc19d766b0cf4e9006e3b7b4b6c",
         strip_prefix = "darwin-arm64",
         build_file_content = """exports_files(["helm"], visibility = ["//visibility:public"])""",
         type = "tar.gz",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/c2f36f3289a01c7c93ca11f84d740a170e0af1d2d0280bd523a409a62b8dfa1d",
-            "https://get.helm.sh/helm-v3.14.0-darwin-arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/61e9c5455f06b2ad0a1280975bf65892e707adc19d766b0cf4e9006e3b7b4b6c",
+            "https://get.helm.sh/helm-v3.14.4-darwin-arm64.tar.gz",
         ],
     )
 
@@ -398,40 +398,40 @@ def _ghh_deps():
     http_archive(
         name = "com_github_katexochen_ghh_linux_amd64",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/e53411fba3e3445bd08d4d7ce0ee9e526e9fcb12045616c80b9eb1cc342f0c90",
-            "https://github.com/katexochen/ghh/releases/download/v0.3.3/ghh_0.3.3_linux_amd64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/32f8a4110d88d80e163212a89a3538a13326494840ac97183d1b20bcc9eac7ba",
+            "https://github.com/katexochen/ghh/releases/download/v0.3.5/ghh_0.3.5_linux_amd64.tar.gz",
         ],
         type = "tar.gz",
         build_file_content = """exports_files(["ghh"], visibility = ["//visibility:public"])""",
-        sha256 = "e53411fba3e3445bd08d4d7ce0ee9e526e9fcb12045616c80b9eb1cc342f0c90",
+        sha256 = "32f8a4110d88d80e163212a89a3538a13326494840ac97183d1b20bcc9eac7ba",
     )
     http_archive(
         name = "com_github_katexochen_ghh_linux_arm64",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/96e8c073fca7b8b56490359b3df0386fac9138224699c71b33c14abc2373452b",
-            "https://github.com/katexochen/ghh/releases/download/v0.3.3/ghh_0.3.3_linux_arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/b43ef1dd2f851eed7c69c87f4f73dd923bd1170cefbde247933d5b398a3319d1",
+            "https://github.com/katexochen/ghh/releases/download/v0.3.5/ghh_0.3.5_linux_arm64.tar.gz",
         ],
         type = "tar.gz",
         build_file_content = """exports_files(["ghh"], visibility = ["//visibility:public"])""",
-        sha256 = "96e8c073fca7b8b56490359b3df0386fac9138224699c71b33c14abc2373452b",
+        sha256 = "b43ef1dd2f851eed7c69c87f4f73dd923bd1170cefbde247933d5b398a3319d1",
     )
     http_archive(
         name = "com_github_katexochen_ghh_darwin_amd64",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/0fbffabe8f80c640403ef9b03348bd34e1f7de1321b0da48a36ae0403fabd09a",
-            "https://github.com/katexochen/ghh/releases/download/v0.3.3/ghh_0.3.3_darwin_amd64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/7db9ebb62faf2a31f56e7a8994a971adddec98b3238880ae58b01eb549b8bba3",
+            "https://github.com/katexochen/ghh/releases/download/v0.3.5/ghh_0.3.5_darwin_amd64.tar.gz",
         ],
         type = "tar.gz",
         build_file_content = """exports_files(["ghh"], visibility = ["//visibility:public"])""",
-        sha256 = "0fbffabe8f80c640403ef9b03348bd34e1f7de1321b0da48a36ae0403fabd09a",
+        sha256 = "7db9ebb62faf2a31f56e7a8994a971adddec98b3238880ae58b01eb549b8bba3",
     )
     http_archive(
         name = "com_github_katexochen_ghh_darwin_arm64",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/32457fadf46c1b3e15c1caeadd176e8ff67152de744c83e7afaeb308bd514193",
-            "https://github.com/katexochen/ghh/releases/download/v0.3.3/ghh_0.3.3_darwin_arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/78a2c8b321893736a2b5de59898794a72b878db9329157f348489c73d4592c6f",
+            "https://github.com/katexochen/ghh/releases/download/v0.3.5/ghh_0.3.5_darwin_arm64.tar.gz",
         ],
         type = "tar.gz",
         build_file_content = """exports_files(["ghh"], visibility = ["//visibility:public"])""",
-        sha256 = "32457fadf46c1b3e15c1caeadd176e8ff67152de744c83e7afaeb308bd514193",
+        sha256 = "78a2c8b321893736a2b5de59898794a72b878db9329157f348489c73d4592c6f",
     )

bazel/toolchains/container_images.bzl

@@ -7,7 +7,7 @@ load("@rules_oci//oci:pull.bzl", "oci_pull")
 def containter_image_deps():
     oci_pull(
         name = "distroless_static",
-        digest = "sha256:6706c73aae2afaa8201d63cc3dda48753c09bcd6c300762251065c0f7e602b25",
+        digest = "sha256:41972110a1c1a5c0b6adb283e8aa092c43c31f7c5d79b8656fbffff2c3e61f05",
         image = "gcr.io/distroless/static",
         platforms = [
             "linux/amd64",
@@ -16,6 +16,6 @@ def containter_image_deps():
     )
     oci_pull(
         name = "libvirtd_base",
-        digest = "sha256:527fc93a1a53c08b51f87295ff45745dab4570da7cbeb28e93f359e813aba29b",
+        digest = "sha256:b1a65581c445a1da618e33743578c4ea80e6a724659fbad9e6555a6a9f48b37a",
         image = "ghcr.io/edgelesssys/constellation/libvirtd-base",
     )

bazel/toolchains/go_module_deps.bzl

@@ -28,8 +28,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "mvdan.cc/editorconfig",
-        sum = "h1:XL+7ys6ls/RKrkUNFQvEwIvNHh+JKx8Mj1pUV5wQxQE=",
-        version = "v0.2.0",
+        sum = "h1:8nmqQGVnHUtHuT+yvuA49lQK0y5il5IOr2PtCBkDI2M=",
+        version = "v0.2.1-0.20231228180347-1925077f8eb2",
     )
     go_repository(
         name = "cc_mvdan_unparam",
@@ -236,8 +236,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/aws/aws-sdk-go",
-        sum = "h1:9VsBVJ2TKf8xPP3+yIPGSYcEBIEymXsJzQoFgQuyvA0=",
-        version = "v1.52.4",
+        sum = "h1:MMo1x1ggPPxDfHMXJnQudTbGXYlD4UigUAud1DJxPVo=",
+        version = "v1.53.0",
     )
     go_repository(
         name = "com_github_aws_aws_sdk_go_v2",
@@ -260,16 +260,16 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/aws/aws-sdk-go-v2/config",
-        sum = "h1:f47rANd2LQEYHda2ddSCKYId18/8BhSRM4BULGmfgNA=",
-        version = "v1.27.11",
+        sum = "h1:WbKW8hOzrWoOA/+35S5okqO/2Ap8hkkFUzoW8Hzq24A=",
+        version = "v1.27.13",
     )
     go_repository(
         name = "com_github_aws_aws_sdk_go_v2_credentials",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/aws/aws-sdk-go-v2/credentials",
-        sum = "h1:YuIB1dJNf1Re822rriUOTxopaHHvIq0l/pX3fwO+Tzs=",
-        version = "v1.17.11",
+        sum = "h1:XDCJDzk/u5cN7Aple7D/MiAhx1Rjo/0nueJ0La8mRuE=",
+        version = "v1.17.13",
     )
     go_repository(
         name = "com_github_aws_aws_sdk_go_v2_feature_ec2_imds",
@@ -284,8 +284,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/aws/aws-sdk-go-v2/feature/s3/manager",
-        sum = "h1:7Zwtt/lP3KNRkeZre7soMELMGNoBrutx8nobg1jKWmo=",
-        version = "v1.16.15",
+        sum = "h1:9b1Os1s11mF5qTIKLgSsyPG810di2+ySSLIIt9bwe9I=",
+        version = "v1.16.17",
     )
     go_repository(
         name = "com_github_aws_aws_sdk_go_v2_internal_configsources",
@@ -324,32 +324,32 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/aws/aws-sdk-go-v2/service/autoscaling",
-        sum = "h1:vhdJymxlWS2qftzLiuCjSswjXBRLGfzo/BEE9LDveBA=",
-        version = "v1.40.5",
+        sum = "h1:IDoEdCkKRy7iPlRVSuDATGE57xUjrk5i1M9eWPYwr/Y=",
+        version = "v1.40.6",
     )
     go_repository(
         name = "com_github_aws_aws_sdk_go_v2_service_cloudfront",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/aws/aws-sdk-go-v2/service/cloudfront",
-        sum = "h1:KbT1H0KXc26/M6km03gBWz5v1M5aOq4Cwo+aXJ2BpfM=",
-        version = "v1.36.0",
+        sum = "h1://GRw/PrpnUyWBJh6KvUvR9AgkDBhclzaj3HKGxRoCw=",
+        version = "v1.36.1",
     )
     go_repository(
         name = "com_github_aws_aws_sdk_go_v2_service_ec2",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/aws/aws-sdk-go-v2/service/ec2",
-        sum = "h1:ooy0OFbrdSwgk32OFGPnvBwry5ySYCKkgTEbQ2hejs8=",
-        version = "v1.160.0",
+        sum = "h1:NbjXshriDs5bGeqKvrOF70L41X0aCMC60ImN2vkcQAc=",
+        version = "v1.161.1",
     )
     go_repository(
         name = "com_github_aws_aws_sdk_go_v2_service_elasticloadbalancingv2",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2",
-        sum = "h1:/x2u/TOx+n17U+gz98TOw1HKJom0EOqrhL4SjrHr0cQ=",
-        version = "v1.30.5",
+        sum = "h1:P5kMcIzrz4Y7GIkvmkosgv/0cs1Crk/VLo5pBhrTWGI=",
+        version = "v1.30.6",
     )
     go_repository(
         name = "com_github_aws_aws_sdk_go_v2_service_internal_accept_encoding",
@@ -396,48 +396,48 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi",
-        sum = "h1:c1jtPWZSmgMmPkCgwv67GE0ugdEgnLVo/BHR1wl3Dm0=",
-        version = "v1.21.4",
+        sum = "h1:GR0vFRc5TpN36ppQJjd+gjRRC9vMAHN5C2W53oMWCJU=",
+        version = "v1.21.5",
     )
     go_repository(
         name = "com_github_aws_aws_sdk_go_v2_service_s3",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/aws/aws-sdk-go-v2/service/s3",
-        sum = "h1:6cnno47Me9bRykw9AEv9zkXE+5or7jz8TsskTTccbgc=",
-        version = "v1.53.1",
+        sum = "h1:rq2hglTQM3yHZvOPVMtNvLS5x6hijx7JvRDgKiTNDGQ=",
+        version = "v1.53.2",
     )
     go_repository(
         name = "com_github_aws_aws_sdk_go_v2_service_secretsmanager",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/aws/aws-sdk-go-v2/service/secretsmanager",
-        sum = "h1:TIOEjw0i2yyhmhRry3Oeu9YtiiHWISZ6j/irS1W3gX4=",
-        version = "v1.28.6",
+        sum = "h1:4cziOtpDwtgcb+wTYRzz8C+GoH1XySy0p7j4oBbqPQE=",
+        version = "v1.28.7",
     )
     go_repository(
         name = "com_github_aws_aws_sdk_go_v2_service_sso",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/aws/aws-sdk-go-v2/service/sso",
-        sum = "h1:vN8hEbpRnL7+Hopy9dzmRle1xmDc7o8tmY0klsr175w=",
-        version = "v1.20.5",
+        sum = "h1:o5cTaeunSpfXiLTIBx5xo2enQmiChtu1IBbzXnfU9Hs=",
+        version = "v1.20.6",
     )
     go_repository(
         name = "com_github_aws_aws_sdk_go_v2_service_ssooidc",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/aws/aws-sdk-go-v2/service/ssooidc",
-        sum = "h1:Jux+gDDyi1Lruk+KHF91tK2KCuY61kzoCpvtvJJBtOE=",
-        version = "v1.23.4",
+        sum = "h1:Qe0r0lVURDDeBQJ4yP+BOrJkvkiCo/3FH/t+wY11dmw=",
+        version = "v1.24.0",
     )
     go_repository(
         name = "com_github_aws_aws_sdk_go_v2_service_sts",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/aws/aws-sdk-go-v2/service/sts",
-        sum = "h1:cwIxeBttqPN3qkaAjcEcsh8NYr8n2HZPkcKgPAi1phU=",
-        version = "v1.28.6",
+        sum = "h1:et3Ta53gotFR4ERLXXHIHl/Uuk1qYpP5uU7cvNql8ns=",
+        version = "v1.28.7",
     )
     go_repository(
         name = "com_github_aws_smithy_go",
@@ -662,8 +662,8 @@ def go_dependencies():
         # keep
         build_file_proto_mode = "default",
         importpath = "github.com/bazelbuild/buildtools",
-        sum = "h1:NJPpHVYOUbpKTXp1DU4dL1Ubk8p7wdxfign2lb7QhAM=",
-        version = "v0.0.0-20240417164354-2bc4b5ebbaaf",
+        sum = "h1:hqhMmuZiSNwCWVHqnpr4DZfIeZ2/aJF7fs207eg7HZo=",
+        version = "v0.0.0-20240422193413-1429e15ae755",
     )
     go_repository(
         name = "com_github_bazelbuild_rules_go",
@@ -673,14 +673,6 @@ def go_dependencies():
         sum = "h1:9s9FA2l8IAxCbwV97E1WLu5ai21muLNrjZRV0+agTRs=",
         version = "v0.47.1",
     )
-    go_repository(
-        name = "com_github_benbjohnson_clock",
-        build_file_generation = "on",
-        build_file_proto_mode = "disable_global",
-        importpath = "github.com/benbjohnson/clock",
-        sum = "h1:Q92kusRqC1XV2MjkWETPvjJVqKetz1OzxZB7mHJLju8=",
-        version = "v1.1.0",
-    )
     go_repository(
         name = "com_github_beorn7_perks",
         build_file_generation = "on",
@@ -726,8 +718,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/bufbuild/protocompile",
-        sum = "h1:LbFKd2XowZvQ/kajzguUp2DC9UEIQhIq77fZZlaQsNA=",
-        version = "v0.4.0",
+        sum = "h1:Uu7WiSQ6Yj9DbkdnOe7U4mNKp58y9WDMKDn28/ZlunY=",
+        version = "v0.6.0",
     )
     go_repository(
         name = "com_github_bufbuild_protovalidate_go",
@@ -1256,14 +1248,6 @@ def go_dependencies():
         sum = "h1:ozqKHaLK0W/ii4KVbbvluM91W2H3Sh0BncbUNPS7jLE=",
         version = "v1.2.0",
     )
-    go_repository(
-        name = "com_github_danwinship_knftables",
-        build_file_generation = "on",
-        build_file_proto_mode = "disable_global",
-        importpath = "github.com/danwinship/knftables",
-        sum = "h1:89Ieiia6MMfXWQF9dyaou1CwBU8h8sHa2Zo3OlY2o04=",
-        version = "v0.0.13",
-    )
     go_repository(
         name = "com_github_data_dog_go_sqlmock",
         build_file_generation = "on",
@@ -1357,8 +1341,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/docker/docker",
-        sum = "h1:oI+4kkAgIwwb54b9OC7Xc3hSgu1RlJA/Lln/DF72djQ=",
-        version = "v26.1.1+incompatible",
+        sum = "h1:UVX5ZOrrfTGZZYEP+ZDq3Xn9PdHNXaSYMFPDumMqG2k=",
+        version = "v26.1.2+incompatible",
     )
     go_repository(
         name = "com_github_docker_docker_credential_helpers",
@@ -1421,8 +1405,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/edgelesssys/go-azguestattestation",
-        sum = "h1:1iKB7b+i7svWC0aKXwggi+kHf0K57g8r9hN4VOpJYYg=",
-        version = "v0.0.0-20230707101700-a683be600fcf",
+        sum = "h1:XcoMVhZve0RRkSxFDn9Bs/z4FpHqZ3eHgVNWNCNOkqc=",
+        version = "v0.0.0-20240513062303-05f8770a633d",
     )
     go_repository(
         name = "com_github_edgelesssys_go_tdx_qpl",
@@ -1589,8 +1573,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/fullstorydev/grpcurl",
-        sum = "h1:xJWosq3BQovQ4QrdPO72OrPiWuGgEsxY8ldYsJbPrqI=",
-        version = "v1.8.7",
+        sum = "h1:JMvZXK8lHDGyLmTQ0ZdGDnVVGuwjbpaumf8p42z0d+c=",
+        version = "v1.8.9",
     )
     go_repository(
         name = "com_github_fvbommel_sortorder",
@@ -2016,14 +2000,6 @@ def go_dependencies():
         sum = "h1:+gYjHKf32LDeiEEFhQaotPbLuUXjY5ZqxKgXy7n59aw=",
         version = "v0.8.1",
     )
-    go_repository(
-        name = "com_github_gofrs_uuid",
-        build_file_generation = "on",
-        build_file_proto_mode = "disable_global",
-        importpath = "github.com/gofrs/uuid",
-        sum = "h1:3qXRTX8/NbyulANqlc0lchS1gqAVxRgsuW1YrTJupqA=",
-        version = "v4.4.0+incompatible",
-    )
     go_repository(
         name = "com_github_gogo_protobuf",
         build_file_generation = "on",
@@ -2125,8 +2101,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/google/cadvisor",
-        sum = "h1:eyYTxKBd+KxI1kh6rst4JSTLUhfHQM34qGpp+0AMlSg=",
-        version = "v0.48.1",
+        sum = "h1:1PYeiORXmcFYi609M4Qvq5IzcvcVaWgYxDt78uH8jYA=",
+        version = "v0.49.0",
     )
     go_repository(
         name = "com_github_google_cel_go",
@@ -2141,8 +2117,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/google/certificate-transparency-go",
-        sum = "h1:SW5K3sr7ptST/pIvNkSVWMiJqemRmkjJPPT0jzXdOOY=",
-        version = "v1.1.6",
+        sum = "h1:LGYKkgZF7satzgTak9R4yzfJXEeYVAjV6/EAEJOf1to=",
+        version = "v1.1.8",
     )
     go_repository(
         name = "com_github_google_gnostic_models",
@@ -2157,8 +2133,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/google/go-attestation",
-        sum = "h1:jXtAWT2sw2Yu8mYU0BC7FDidR+ngxFPSE+pl6IUu3/0=",
-        version = "v0.5.0",
+        sum = "h1:jqtOrLk5MNdliTKjPbIPrAaRKJaKW+0LIU2n/brJYms=",
+        version = "v0.5.1",
     )
     go_repository(
         name = "com_github_google_go_cmdtest",
@@ -2221,9 +2197,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/google/go-sev-guest",
-        replace = "github.com/google/go-sev-guest",
-        sum = "h1:6o4Z/vQqNUH+cEagfx1Ez5ElK70iZulEXZwmLnRo44I=",
-        version = "v0.0.0-20230928233922-2dcbba0a4b9d",
+        sum = "h1:gnww4U8fHV5DCPz4gykr1s8SEX1fFNcxCBy+vvXN24k=",
+        version = "v0.11.1",
     )
     go_repository(
         name = "com_github_google_go_tdx_guest",
@@ -2238,9 +2213,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/google/go-tpm",
-        replace = "github.com/thomasten/go-tpm",
-        sum = "h1:840nUyrM9df2aLuzWuIkYx/DrUbX4KQZO6B9LD45aWo=",
-        version = "v0.0.0-20230629092004-f43f8e2a59eb",
+        sum = "h1:gfGQAIxsEEAuYuFvjCGpDnTwisMJOz+rUfJMkk4yTmc=",
+        version = "v0.9.1-0.20240510201744-5c2f0887e003",
     )
     go_repository(
         name = "com_github_google_go_tpm_tools",
@@ -2285,8 +2259,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/google/keep-sorted",
-        sum = "h1:nsDd3h16Bf1KFNtfvzGoLaei95AMLswikiw1ICDOKPE=",
-        version = "v0.3.0",
+        sum = "h1:UNJGKBtOg4m4rgTYCpkBh0WBI2UTLm+xNC1lZvfQpp0=",
+        version = "v0.4.0",
     )
     go_repository(
         name = "com_github_google_licenseclassifier",
@@ -2462,8 +2436,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/gorilla/mux",
-        sum = "h1:i40aqfkR1h2SlN9hojwV5ZA91wcXFOvkdNIeFDP5koI=",
-        version = "v1.8.0",
+        sum = "h1:TuBL49tXwgrFYWhqrNgrUNEY92u81SPhu7sTdzQEiWY=",
+        version = "v1.8.1",
     )
     go_repository(
         name = "com_github_gorilla_websocket",
@@ -2966,8 +2940,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/jhump/protoreflect",
-        sum = "h1:HUMERORf3I3ZdX05WaQ6MIpd/NJ434hTp5YiKgfCL6c=",
-        version = "v1.15.1",
+        sum = "h1:6SFRuqU45u9hIZPJAoZ8c28T3nK64BNdp9w6jFonzls=",
+        version = "v1.15.3",
     )
     go_repository(
         name = "com_github_jmespath_go_jmespath",
@@ -3006,8 +2980,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/jonboulle/clockwork",
-        sum = "h1:9BSCMi8C+0qdApAp4auwX0RkLGUjs956h0EkuQymUhg=",
-        version = "v0.3.0",
+        sum = "h1:p4Cf1aMWXnXAUh8lVfewRBx1zaTSYKrKMF2g3ST4RZ4=",
+        version = "v0.4.0",
     )
     go_repository(
         name = "com_github_josephspurrier_goversioninfo",
@@ -3094,8 +3068,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/katexochen/sh/v3",
-        sum = "h1:jrU9BWBgp9o2NcetUVm3dNpQ2SK1zG6aF6WF0wtPajc=",
-        version = "v3.7.0",
+        sum = "h1:/BNMhF21b6Q4vcB6YyGtxcGGcdT3NCTiUBNBYcI3EmI=",
+        version = "v3.8.0",
     )
     go_repository(
         name = "com_github_kevinburke_ssh_config",
@@ -3498,8 +3472,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/mattn/go-sqlite3",
-        sum = "h1:yOQRA0RpS5PFz/oikGwBEqvAWhWg5ufRz4ETLjwpU1Y=",
-        version = "v1.14.16",
+        sum = "h1:2gZY6PC6kBnID23Tichd1K+Z0oS6nE/XwU+Vz/5o4kU=",
+        version = "v1.14.22",
     )
     go_repository(
         name = "com_github_matttproud_golang_protobuf_extensions",
@@ -3962,8 +3936,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/opencontainers/runc",
-        sum = "h1:EaL5WeO9lv9wmS6SASjszOeQdSctvpbu0DdBQBizE40=",
-        version = "v1.1.10",
+        sum = "h1:BOIssBaW1La0/qbNZHXOOa71dZfZEQOzW7dqQf3phss=",
+        version = "v1.1.12",
     )
     go_repository(
         name = "com_github_opencontainers_runtime_spec",
@@ -4202,8 +4176,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/prometheus/prometheus",
-        sum = "h1:Z/Z0S0CoPUVtUnHGokFksWMssSw2Y1Ir9NnWS1pPWU0=",
-        version = "v0.43.1",
+        sum = "h1:jWcnuQHz1o1Wu3MZ6nMJDuTI0kU5yJp9pkxh8XEkNvI=",
+        version = "v0.47.2",
     )
     go_repository(
         name = "com_github_protonmail_go_crypto",
@@ -4317,14 +4291,6 @@ def go_dependencies():
         sum = "h1:bMDqOnrJVV/6JQgQ/MxOpU+AdO8uzYYA/TxFUBzFtS0=",
         version = "v1.5.2",
     )
-    go_repository(
-        name = "com_github_rubiojr_go_vhd",
-        build_file_generation = "on",
-        build_file_proto_mode = "disable_global",
-        importpath = "github.com/rubiojr/go-vhd",
-        sum = "h1:if3/24+h9Sq6eDx8UUz1SO9cT9tizyIsATfB7b4D3tc=",
-        version = "v0.0.0-20200706105327-02e210299021",
-    )
     go_repository(
         name = "com_github_russross_blackfriday",
         build_file_generation = "on",
@@ -4770,9 +4736,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/tink-crypto/tink-go/v2",
-        replace = "github.com/derpsteb/tink-go/v2",
-        sum = "h1:FVii9oXvddz9sFir5TRYjQKrzJLbVD/hibT+SnRSDzg=",
-        version = "v2.0.0-20231002051717-a808e454eed6",
+        sum = "h1:QXFBguwMwTIaU17EgZpEJWsUSc60b1BAGTzBIoMdmok=",
+        version = "v2.1.0",
     )
     go_repository(
         name = "com_github_tinylib_msgp",
@@ -4859,8 +4824,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/urfave/cli",
-        sum = "h1:igJgVw1JdKH+trcLWLeLwZjU9fEfPesQ+9/e4MQ44S8=",
-        version = "v1.22.12",
+        sum = "h1:ebbhrRiGK2i4naQJr+1Xj92HXZCrK7MsyTS/ob3HnAk=",
+        version = "v1.22.14",
     )
     go_repository(
         name = "com_github_vbatts_tar_split",
@@ -4934,14 +4899,6 @@ def go_dependencies():
         sum = "h1:y09buUbR+b5aycVFQs/g70pqKVZNBmxwAhO7/IwNM9g=",
         version = "v2.0.0",
     )
-    go_repository(
-        name = "com_github_vmware_govmomi",
-        build_file_generation = "on",
-        build_file_proto_mode = "disable_global",
-        importpath = "github.com/vmware/govmomi",
-        sum = "h1:O3tjSwQBy0XwI5uK1/yVIfQ1LP9bAECEDUfifnyGs9U=",
-        version = "v0.30.6",
-    )
     go_repository(
         name = "com_github_vtolstov_go_ioctl",
         build_file_generation = "on",
@@ -5043,8 +5000,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "github.com/xiang90/probing",
-        sum = "h1:eY9dn8+vbi4tKz5Qo6v2eYzo7kUS51QINcR5jNpbZS8=",
-        version = "v0.0.0-20190116061207-43a291ad63a2",
+        sum = "h1:S2dVYn90KE98chqDkyE9Z4N61UnQd+KOfgp5Iu53llk=",
+        version = "v0.0.0-20221125231312-a49e3df8f510",
     )
     go_repository(
         name = "com_github_xlab_treeprint",
@@ -5299,8 +5256,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "cloud.google.com/go/auth",
-        sum = "h1:PRyzEpGfx/Z9e8+lHsbkoUVXD0gnu4MNmm7Gp8TQNIs=",
-        version = "v0.3.0",
+        sum = "h1:Z7YNIhlWRtrnKlZke7z3GMqzvuYzdc2z98F9D1NV5Hg=",
+        version = "v0.4.1",
     )
     go_repository(
         name = "com_google_cloud_go_auth_oauth2adapt",
@@ -5667,8 +5624,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "cloud.google.com/go/iam",
-        sum = "h1:z4VHOhwKLF/+UYXAJDFwGtNF0b6gjsW1Pk9Ml0U/IoM=",
-        version = "v1.1.7",
+        sum = "h1:r7umDwhj+BQyz0ScZMp4QrGXjSTI3ZINnpgU2nlB/K0=",
+        version = "v1.1.8",
     )
     go_repository(
         name = "com_google_cloud_go_iap",
@@ -5699,8 +5656,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "cloud.google.com/go/kms",
-        sum = "h1:ouZjTxCqDNEdxWfaAAbRzG22s/2iewRw6JPARQL+0vc=",
-        version = "v1.15.9",
+        sum = "h1:1yZsRPhmargZOmY+fVAh8IKiR9HzCb0U1zsxb5g2nRY=",
+        version = "v1.16.0",
     )
     go_repository(
         name = "com_google_cloud_go_language",
@@ -5731,8 +5688,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "cloud.google.com/go/longrunning",
-        sum = "h1:xAe8+0YaWoCKr9t1+aWe+OeQgN/iJK1fEgZSXmjuEaE=",
-        version = "v0.5.6",
+        sum = "h1:WLbHekDbjK1fVFD3ibpFFVoyizlLRl73I7YKuAKilhU=",
+        version = "v0.5.7",
     )
     go_repository(
         name = "com_google_cloud_go_managedidentities",
@@ -6355,8 +6312,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "go.etcd.io/etcd/client/v2",
-        sum = "h1:MrmRktzv/XF8CvtQt+P6wLUlURaNpSDJHFZhe//2QE4=",
-        version = "v2.305.10",
+        sum = "h1:0m4ovXYo1CHaA/Mp3X/Fak5sRNIWf01wk/X1/G3sGKI=",
+        version = "v2.305.12",
     )
     go_repository(
         name = "io_etcd_go_etcd_client_v3",
@@ -6371,56 +6328,56 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "go.etcd.io/etcd/etcdctl/v3",
-        sum = "h1:Hc+yvk0e1VOKSzNNA0ZyNqzOQf/jrAZarx/IFd6KcPk=",
-        version = "v3.5.8",
+        sum = "h1:GSmhNeq9LGt/gKHbzOmuPLO946GG5ZBCs9h28o0nNkE=",
+        version = "v3.5.12",
     )
     go_repository(
         name = "io_etcd_go_etcd_etcdutl_v3",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "go.etcd.io/etcd/etcdutl/v3",
-        sum = "h1:KTVdvP+9unMtYifGPcIQRMOhsbhek78W8DiCoAbYbQE=",
-        version = "v3.5.8",
+        sum = "h1:R3HLloeRcIOAvNtOTcMV9fshCbz9aZP2Xh4AP2+KnFU=",
+        version = "v3.5.12",
     )
     go_repository(
         name = "io_etcd_go_etcd_pkg_v3",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "go.etcd.io/etcd/pkg/v3",
-        sum = "h1:WPR8K0e9kWl1gAhB5A7gEa5ZBTNkT9NdNWrR8Qpo1CM=",
-        version = "v3.5.10",
+        sum = "h1:OK2fZKI5hX/+BTK76gXSTyZMrbnARyX9S643GenNGb8=",
+        version = "v3.5.12",
     )
     go_repository(
         name = "io_etcd_go_etcd_raft_v3",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "go.etcd.io/etcd/raft/v3",
-        sum = "h1:cgNAYe7xrsrn/5kXMSaH8kM/Ky8mAdMqGOxyYwpP0LA=",
-        version = "v3.5.10",
+        sum = "h1:7r22RufdDsq2z3STjoR7Msz6fYH8tmbkdheGfwJNRmU=",
+        version = "v3.5.12",
     )
     go_repository(
         name = "io_etcd_go_etcd_server_v3",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "go.etcd.io/etcd/server/v3",
-        sum = "h1:4NOGyOwD5sUZ22PiWYKmfxqoeh72z6EhYjNosKGLmZg=",
-        version = "v3.5.10",
+        sum = "h1:EtMjsbfyfkwZuA2JlKOiBfuGkFCekv5H178qjXypbG8=",
+        version = "v3.5.12",
     )
     go_repository(
         name = "io_etcd_go_etcd_tests_v3",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "go.etcd.io/etcd/tests/v3",
-        sum = "h1:jrWlrEJfFuvI9nqMGFZNLc+OCdtyBdw8mSfp8ZwLIWs=",
-        version = "v3.5.8",
+        sum = "h1:k1fG7+F87Z7zKp57EcjXu9XgOsW0sfp5USqfzmMTIwM=",
+        version = "v3.5.12",
     )
     go_repository(
         name = "io_etcd_go_etcd_v3",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "go.etcd.io/etcd/v3",
-        sum = "h1:AQF+i8f8jLeli9Cmf6SIs3KNryFPnzlIzI7weyK784g=",
-        version = "v3.5.8",
+        sum = "h1:YMdAAKv9xGTeWvfcangHj0Yqbph9w43xwosKOKzWJxs=",
+        version = "v3.5.12",
     )
     go_repository(
         name = "io_filippo_edwards25519",
@@ -6492,8 +6449,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "k8s.io/cluster-bootstrap",
-        sum = "h1:zCYdZ+LWDj4O86FB5tDKckIEsf2qBHjcp78xtjOzD3A=",
-        version = "v0.29.0",
+        sum = "h1:vaIjA1eMFpcLYz+p6NMj75aqiauDahFx9EkuTxc0GMI=",
+        version = "v0.30.0",
     )
     go_repository(
         name = "io_k8s_code_generator",
@@ -6533,8 +6490,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "k8s.io/cri-api",
-        sum = "h1:atenAqOltRsFqcCQlFFpDnl/R4aGfOELoNLTDJfd7t8=",
-        version = "v0.29.0",
+        sum = "h1:hZqh3vH5JZdqeAyhD9nPXSbT6GDgrtPJkPiIzhWKVhk=",
+        version = "v0.30.0",
     )
     go_repository(
         name = "io_k8s_csi_translation_lib",
@@ -6563,14 +6520,6 @@ def go_dependencies():
         sum = "h1:HM+zsyqSALW7FzOVCWYsF+eFabiTGDrZpLEZZX2065U=",
         version = "v0.29.0",
     )
-    go_repository(
-        name = "io_k8s_gengo",
-        build_file_generation = "on",
-        build_file_proto_mode = "disable_global",
-        importpath = "k8s.io/gengo",
-        sum = "h1:pWEwq4Asjm4vjW7vcsmijwBhOr1/shsbSYiWXmNGlks=",
-        version = "v0.0.0-20230829151522-9cce18d56c01",
-    )
     go_repository(
         name = "io_k8s_gengo_v2",
         build_file_generation = "on",
@@ -6652,16 +6601,16 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "k8s.io/kubelet",
-        sum = "h1:SX5hlznTBcGIrS1scaf8r8p6m3e475KMifwt9i12iOk=",
-        version = "v0.29.0",
+        sum = "h1:/pqHVR2Rn8ExCpn211wL3pMtqRFpcBcJPl4+1INbIMk=",
+        version = "v0.30.0",
     )
     go_repository(
         name = "io_k8s_kubernetes",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "k8s.io/kubernetes",
-        sum = "h1:n4VCbX9cUhxHI+zw+m2iZlzT73/mrEJBHIMeauh9g4U=",
-        version = "v1.29.4",
+        sum = "h1:u3Yw8rNlo2NDSGaDpoxoHXLPQnEu1tfqHATKOJe94HY=",
+        version = "v1.30.0",
     )
     go_repository(
         name = "io_k8s_legacy_cloud_providers",
@@ -6685,8 +6634,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "k8s.io/mount-utils",
-        sum = "h1:KcUE0bFHONQC10V3SuLWQ6+l8nmJggw9lKLpDftIshI=",
-        version = "v0.29.0",
+        sum = "h1:EceYTNYVabfpdtIAHC4KgMzoZkm1B8ovZ1J666mYZQI=",
+        version = "v0.30.0",
     )
     go_repository(
         name = "io_k8s_pod_security_admission",
@@ -6730,6 +6679,14 @@ def go_dependencies():
         sum = "h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo=",
         version = "v0.0.0-20221116044647-bc3834ca7abd",
     )
+    go_repository(
+        name = "io_k8s_sigs_knftables",
+        build_file_generation = "on",
+        build_file_proto_mode = "disable_global",
+        importpath = "sigs.k8s.io/knftables",
+        sum = "h1:VzKQoDMCGBOH8c85sGrWSXSPCS0XrIpEfOlcCLBXiC0=",
+        version = "v0.0.14",
+    )
     go_repository(
         name = "io_k8s_sigs_kustomize_api",
         build_file_generation = "on",
@@ -6855,16 +6812,16 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
-        sum = "h1:Mne5On7VWdx7omSrSSZvM4Kw7cS7NQkOOmLcgscI51U=",
-        version = "v1.19.0",
+        sum = "h1:DeFD0VgTZ+Cj6hxravYYZE2W4GlneVH81iAOPjZkzk8=",
+        version = "v1.20.0",
     )
     go_repository(
         name = "io_opentelemetry_go_otel_exporters_otlp_otlptrace_otlptracegrpc",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
-        sum = "h1:3d+S281UTjM+AbF31XSOYn1qXn3BgIdWl8HNEpx08Jk=",
-        version = "v1.19.0",
+        sum = "h1:gvmNvqrPYovvyRmCSygkUDyL8lC5Tl845MLEwqpxhEU=",
+        version = "v1.20.0",
     )
     go_repository(
         name = "io_opentelemetry_go_otel_exporters_otlp_otlptrace_otlptracehttp",
@@ -6959,16 +6916,16 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "bitbucket.org/creachadair/shell",
-        sum = "h1:Z96pB6DkSb7F3Y3BBnJeOZH2gazyMTWlvecSD4vDqfk=",
-        version = "v0.0.7",
+        sum = "h1:3yM6JcAfaGWzjzcCamTblzSIWXm/YSs0PFGIzBm2HTo=",
+        version = "v0.0.8",
     )
     go_repository(
         name = "org_golang_google_api",
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "google.golang.org/api",
-        sum = "h1:yoW/QMI4bRVCHF+NWOTa4cL8MoWL3Jnuc7FlcFF91Ok=",
-        version = "v0.178.0",
+        sum = "h1:M2D87Yo0rGBPWpo1orwfCLehUUL6E7/TYe5gvMQWDh4=",
+        version = "v0.180.0",
     )
     go_repository(
         name = "org_golang_google_appengine",
@@ -6991,8 +6948,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "google.golang.org/genproto/googleapis/api",
-        sum = "h1:DTJM0R8LECCgFeUwApvcEJHz85HLagW8uRENYxHh1ww=",
-        version = "v0.0.0-20240429193739-8cf5692501f6",
+        sum = "h1:AH34z6WAGVNkllnKs5raNq3yRq93VnjBG6rpfub/jYk=",
+        version = "v0.0.0-20240506185236-b8a5c65736ae",
     )
     go_repository(
         name = "org_golang_google_genproto_googleapis_bytestream",
@@ -7159,8 +7116,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "golang.org/x/vuln",
-        sum = "h1:KUas02EjQK5LTuIx1OylBQdKKZ9jeugs+HiqO5HormU=",
-        version = "v1.0.1",
+        sum = "h1:ECEdI+aEtjpF90eqEcDL5Q11DWSZAw5PJQWlp0+gWqc=",
+        version = "v1.1.0",
     )
     go_repository(
         name = "org_golang_x_xerrors",
@@ -7203,8 +7160,8 @@ def go_dependencies():
         build_file_generation = "on",
         build_file_proto_mode = "disable_global",
         importpath = "go.uber.org/atomic",
-        sum = "h1:9qC72Qh0+3MqyJbAn8YU5xVq1frD8bn3JtD2oXtafVQ=",
-        version = "v1.10.0",
+        sum = "h1:ADUqmZGgLDDfbSL9ZmPxKTybcoEYHgpYfELNoN+7hsw=",
+        version = "v1.7.0",
     )
     go_repository(
         name = "org_uber_go_goleak",

bazel/toolchains/go_rules_deps.bzl

@@ -9,21 +9,27 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 def go_deps():
     http_archive(
         name = "io_bazel_rules_go",
-        sha256 = "80a98277ad1311dacd837f9b16db62887702e9f1d1c4c9f796d0121a46c8e184",
+        sha256 = "f74c98d6df55217a36859c74b460e774abc0410a47cc100d822be34d5f990f16",
         urls = [
-            "https://mirror.bazel.build/github.com/bazelbuild/rules_go/releases/download/v0.46.0/rules_go-v0.46.0.zip",
-            "https://cdn.confidential.cloud/constellation/cas/sha256/80a98277ad1311dacd837f9b16db62887702e9f1d1c4c9f796d0121a46c8e184",
-            "https://github.com/bazelbuild/rules_go/releases/download/v0.46.0/rules_go-v0.46.0.zip",
+            "https://mirror.bazel.build/github.com/bazelbuild/rules_go/releases/download/v0.47.1/rules_go-v0.47.1.zip",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/f74c98d6df55217a36859c74b460e774abc0410a47cc100d822be34d5f990f16",
+            "https://github.com/bazelbuild/rules_go/releases/download/v0.47.1/rules_go-v0.47.1.zip",
         ],
+        remote_patches = {
+            # Move timeout handling back to bzltestutil
+            # remove after https://github.com/bazelbuild/rules_go/pull/3939 is merged
+            "https://github.com/bazelbuild/rules_go/commit/cc911bfec4f52d93d1c47cc92a3bc03ec8f9cb33.patch": "sha256-Z1jNoEagzSghHrf1SiLLMLGpFq/IBvOjZMxWaIk1O3M=",
+        },
+        remote_patch_strip = 1,
         type = "zip",
     )
     http_archive(
         name = "bazel_gazelle",
-        sha256 = "32938bda16e6700063035479063d9d24c60eda8d79fd4739563f50d331cb3209",
+        sha256 = "75df288c4b31c81eb50f51e2e14f4763cb7548daae126817247064637fd9ea62",
         urls = [
-            "https://mirror.bazel.build/github.com/bazelbuild/bazel-gazelle/releases/download/v0.35.0/bazel-gazelle-v0.35.0.tar.gz",
-            "https://cdn.confidential.cloud/constellation/cas/sha256/32938bda16e6700063035479063d9d24c60eda8d79fd4739563f50d331cb3209",
-            "https://github.com/bazelbuild/bazel-gazelle/releases/download/v0.35.0/bazel-gazelle-v0.35.0.tar.gz",
+            "https://mirror.bazel.build/github.com/bazelbuild/bazel-gazelle/releases/download/v0.36.0/bazel-gazelle-v0.36.0.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/75df288c4b31c81eb50f51e2e14f4763cb7548daae126817247064637fd9ea62",
+            "https://github.com/bazelbuild/bazel-gazelle/releases/download/v0.36.0/bazel-gazelle-v0.36.0.tar.gz",
         ],
         type = "tar.gz",
     )

bazel/toolchains/hermetic_cc_deps.bzl

@@ -8,9 +8,9 @@ def hermetic_cc_deps():
     http_archive(
         name = "hermetic_cc_toolchain",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/3b8107de0d017fe32e6434086a9568f97c60a111b49dc34fc7001e139c30fdea",
-            "https://github.com/uber/hermetic_cc_toolchain/releases/download/v2.2.1/hermetic_cc_toolchain-v2.2.1.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/3bc6ec127622fdceb4129cb06b6f7ab098c4d539124dde96a6318e7c32a53f7a",
+            "https://github.com/uber/hermetic_cc_toolchain/releases/download/v3.0.1/hermetic_cc_toolchain-v3.0.1.tar.gz",
         ],
         type = "tar.gz",
-        sha256 = "3b8107de0d017fe32e6434086a9568f97c60a111b49dc34fc7001e139c30fdea",
+        sha256 = "3bc6ec127622fdceb4129cb06b6f7ab098c4d539124dde96a6318e7c32a53f7a",
     )

bazel/toolchains/linux_kernel.bzl

@@ -9,74 +9,74 @@ def kernel_rpms():
     http_file(
         name = "kernel_lts",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/b4a8e5217cb62241631d1a7357979face1ad455a08cd4ca8f59c2252a90047f6",
-            "https://cdn.confidential.cloud/constellation/kernel/6.1.79-100.constellation/kernel-6.1.79-100.constellation.fc38.x86_64.rpm",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/c87995e19c04e2f033e6db5e92bfcb845ac015722e776c09a7af4c82c86cd273",
+            "https://cdn.confidential.cloud/constellation/kernel/6.6.30-100.constellation/kernel-6.6.30-100.constellation.fc40.x86_64.rpm",
         ],
         downloaded_file_path = "kernel-lts.rpm",
-        sha256 = "b4a8e5217cb62241631d1a7357979face1ad455a08cd4ca8f59c2252a90047f6",
+        sha256 = "c87995e19c04e2f033e6db5e92bfcb845ac015722e776c09a7af4c82c86cd273",
     )
     http_file(
         name = "kernel_core_lts",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/03e9ae8508cf1cd964216eed858c69d55629d8d27a44965857e408defcfe4785",
-            "https://cdn.confidential.cloud/constellation/kernel/6.1.79-100.constellation/kernel-core-6.1.79-100.constellation.fc38.x86_64.rpm",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/5692d862b0cc0c442c581e5f3dc9f3c36cabda0c29d3f62e9b6313a6ec88b140",
+            "https://cdn.confidential.cloud/constellation/kernel/6.6.30-100.constellation/kernel-core-6.6.30-100.constellation.fc40.x86_64.rpm",
         ],
         downloaded_file_path = "kernel-core-lts.rpm",
-        sha256 = "03e9ae8508cf1cd964216eed858c69d55629d8d27a44965857e408defcfe4785",
+        sha256 = "5692d862b0cc0c442c581e5f3dc9f3c36cabda0c29d3f62e9b6313a6ec88b140",
     )
     http_file(
         name = "kernel_modules_lts",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/c306c13f17024915682304e4f05ca21dd9533a34921684520135bc7e69e3d327",
-            "https://cdn.confidential.cloud/constellation/kernel/6.1.79-100.constellation/kernel-modules-6.1.79-100.constellation.fc38.x86_64.rpm",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/e1b697343b4f8ed8e992cd92860208dc1c28eb8b25a88f42f426326a0bbc307f",
+            "https://cdn.confidential.cloud/constellation/kernel/6.6.30-100.constellation/kernel-modules-6.6.30-100.constellation.fc40.x86_64.rpm",
         ],
         downloaded_file_path = "kernel-modules-lts.rpm",
-        sha256 = "c306c13f17024915682304e4f05ca21dd9533a34921684520135bc7e69e3d327",
+        sha256 = "e1b697343b4f8ed8e992cd92860208dc1c28eb8b25a88f42f426326a0bbc307f",
     )
     http_file(
         name = "kernel_modules_core_lts",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/2183a23562e1d69a64e799baf1cf64ae34c4058f24993e3fe7645e3e363e899a",
-            "https://cdn.confidential.cloud/constellation/kernel/6.1.79-100.constellation/kernel-modules-core-6.1.79-100.constellation.fc38.x86_64.rpm",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/448c6b10d9ed02aed078ff77223f5e495b2041be12d92eb0e5ca5726a08e0626",
+            "https://cdn.confidential.cloud/constellation/kernel/6.6.30-100.constellation/kernel-modules-core-6.6.30-100.constellation.fc40.x86_64.rpm",
         ],
         downloaded_file_path = "kernel-modules-core-lts.rpm",
-        sha256 = "2183a23562e1d69a64e799baf1cf64ae34c4058f24993e3fe7645e3e363e899a",
+        sha256 = "448c6b10d9ed02aed078ff77223f5e495b2041be12d92eb0e5ca5726a08e0626",
     )
 
     # mainline kernel
     http_file(
         name = "kernel_mainline",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/303506771939b324c32c2d7df4ce2a8ca08af4fe0fec77712084bdd3c1481bc9",
-            "https://kojipkgs.fedoraproject.org/packages/kernel/6.7.6/100.fc38/x86_64/kernel-6.7.6-100.fc38.x86_64.rpm",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/6eaec29870e6549d95a93b72ea10715507db84b851c68c0d75e44e4c20f895f2",
+            "https://kojipkgs.fedoraproject.org/packages/kernel/6.8.9/300.fc40/x86_64/kernel-6.8.9-300.fc40.x86_64.rpm",
         ],
         downloaded_file_path = "kernel-mainline.rpm",
-        sha256 = "303506771939b324c32c2d7df4ce2a8ca08af4fe0fec77712084bdd3c1481bc9",
+        sha256 = "6eaec29870e6549d95a93b72ea10715507db84b851c68c0d75e44e4c20f895f2",
     )
     http_file(
         name = "kernel_core_mainline",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/f51347ddeca348494fe20a898b455f84e1e7c4cda6832fb5dc2d092b94ddc039",
-            "https://kojipkgs.fedoraproject.org/packages/kernel/6.7.6/100.fc38/x86_64/kernel-core-6.7.6-100.fc38.x86_64.rpm",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/910fd35209f7dc8185e88dddeaccf6158dd63ad9fd469ef3dc81b96840ef28eb",
+            "https://kojipkgs.fedoraproject.org/packages/kernel/6.8.9/300.fc40/x86_64/kernel-core-6.8.9-300.fc40.x86_64.rpm",
         ],
         downloaded_file_path = "kernel-core-mainline.rpm",
-        sha256 = "f51347ddeca348494fe20a898b455f84e1e7c4cda6832fb5dc2d092b94ddc039",
+        sha256 = "910fd35209f7dc8185e88dddeaccf6158dd63ad9fd469ef3dc81b96840ef28eb",
     )
     http_file(
         name = "kernel_modules_mainline",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/4a0c65aac2628fc24e460f68eb2b1a9b8d749f319d10962257dcfeee7cadb09c",
-            "https://kojipkgs.fedoraproject.org/packages/kernel/6.7.6/100.fc38/x86_64/kernel-modules-6.7.6-100.fc38.x86_64.rpm",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/b8de20433c68d2fe0ca6625e25f314aba36a9327592db8b1478b97bb50521149",
+            "https://kojipkgs.fedoraproject.org/packages/kernel/6.8.9/300.fc40/x86_64/kernel-modules-6.8.9-300.fc40.x86_64.rpm",
         ],
         downloaded_file_path = "kernel-modules-mainline.rpm",
-        sha256 = "4a0c65aac2628fc24e460f68eb2b1a9b8d749f319d10962257dcfeee7cadb09c",
+        sha256 = "b8de20433c68d2fe0ca6625e25f314aba36a9327592db8b1478b97bb50521149",
     )
     http_file(
         name = "kernel_modules_core_mainline",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/127a1b895ba6a7842e8503770ccc3b412fca195a9f750bb3f94788c2384ab577",
-            "https://kojipkgs.fedoraproject.org/packages/kernel/6.7.6/100.fc38/x86_64/kernel-modules-core-6.7.6-100.fc38.x86_64.rpm",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/8ecd8e96483810d18e04a20cd8ecef46f27bff0fbb54f23e67adb813828b3cec",
+            "https://kojipkgs.fedoraproject.org/packages/kernel/6.8.9/300.fc40/x86_64/kernel-modules-core-6.8.9-300.fc40.x86_64.rpm",
         ],
         downloaded_file_path = "kernel-modules-core-mainline.rpm",
-        sha256 = "127a1b895ba6a7842e8503770ccc3b412fca195a9f750bb3f94788c2384ab577",
+        sha256 = "8ecd8e96483810d18e04a20cd8ecef46f27bff0fbb54f23e67adb813828b3cec",
     )

bazel/toolchains/multirun_deps.bzl

@@ -5,11 +5,11 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 def multirun_deps():
     http_archive(
         name = "com_github_ash2k_bazel_tools",
-        sha256 = "a911dab6711bc12a00f02cc94b66ced7dc57650e382ebd4f17c9cdb8ec2cbd56",
-        strip_prefix = "bazel-tools-2add5bb84c2837a82a44b57e83c7414247aed43a",
+        sha256 = "c5c2bb097ef427ab021f522828167c6d85c3e9077763629343282c51dbde03db",
+        strip_prefix = "bazel-tools-ad2d84beb4e577bda323c8517533b046ed34e6ad",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/a911dab6711bc12a00f02cc94b66ced7dc57650e382ebd4f17c9cdb8ec2cbd56",
-            "https://github.com/ash2k/bazel-tools/archive/2add5bb84c2837a82a44b57e83c7414247aed43a.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/c5c2bb097ef427ab021f522828167c6d85c3e9077763629343282c51dbde03db",
+            "https://github.com/ash2k/bazel-tools/archive/ad2d84beb4e577bda323c8517533b046ed34e6ad.tar.gz",
         ],
         type = "tar.gz",
     )

bazel/toolchains/nixpkgs_deps.bzl

@@ -5,11 +5,11 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 def nixpkgs_deps():
     http_archive(
         name = "io_tweag_rules_nixpkgs",
-        sha256 = "d4a8c10121ec7494402a0ae8c1a896ced20d4bef4485b107e37f5331716c3626",
-        strip_prefix = "rules_nixpkgs-244ae504d3f25534f6d3877ede4ee50e744a5234",
+        sha256 = "2a555348d7f8593fca2bf3fc6ce53c5d62929de81b6c292e23f16c557c0ae45a",
+        strip_prefix = "rules_nixpkgs-0.11.1",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/d4a8c10121ec7494402a0ae8c1a896ced20d4bef4485b107e37f5331716c3626",
-            "https://github.com/tweag/rules_nixpkgs/archive/244ae504d3f25534f6d3877ede4ee50e744a5234.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/2a555348d7f8593fca2bf3fc6ce53c5d62929de81b6c292e23f16c557c0ae45a",
+            "https://github.com/tweag/rules_nixpkgs/releases/download/v0.11.1/rules_nixpkgs-0.11.1.tar.gz",
         ],
         type = "tar.gz",
     )

bazel/toolchains/skylib_deps.bzl

@@ -5,11 +5,11 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 def skylib_deps():
     http_archive(
         name = "bazel_skylib",
-        sha256 = "cd55a062e763b9349921f0f5db8c3933288dc8ba4f76dd9416aac68acee3cb94",
+        sha256 = "9f38886a40548c6e96c106b752f242130ee11aaa068a56ba7e56f4511f33e4f2",
         urls = [
-            "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.5.0/bazel-skylib-1.5.0.tar.gz",
-            "https://cdn.confidential.cloud/constellation/cas/sha256/cd55a062e763b9349921f0f5db8c3933288dc8ba4f76dd9416aac68acee3cb94",
-            "https://github.com/bazelbuild/bazel-skylib/releases/download/1.5.0/bazel-skylib-1.5.0.tar.gz",
+            "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.6.1/bazel-skylib-1.6.1.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/9f38886a40548c6e96c106b752f242130ee11aaa068a56ba7e56f4511f33e4f2",
+            "https://github.com/bazelbuild/bazel-skylib/releases/download/1.6.1/bazel-skylib-1.6.1.tar.gz",
         ],
         type = "tar.gz",
     )

debugd/filebeat/Dockerfile

@@ -1,4 +1,4 @@
-FROM fedora:38@sha256:3f01c8f79691df76331cb4bb0944794a60850475e859c15e49513fcbe0a3d88a AS release
+FROM fedora:40@sha256:5ce8497aeea599bf6b54ab3979133923d82aaa4f6ca5ced1812611b197c79eb0 AS release
 
 RUN dnf install -y https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-8.6.2-x86_64.rpm
 

debugd/logstash/Dockerfile

@@ -1,11 +1,11 @@
-FROM fedora:38@sha256:3f01c8f79691df76331cb4bb0944794a60850475e859c15e49513fcbe0a3d88a AS build
+FROM fedora:40@sha256:5ce8497aeea599bf6b54ab3979133923d82aaa4f6ca5ced1812611b197c79eb0 AS build
 
 ARG LOGSTASH_VER=8.6.1
 
 RUN curl -fsSLO https://artifacts.opensearch.org/logstash/logstash-oss-with-opensearch-output-plugin-$LOGSTASH_VER-linux-x64.tar.gz
 RUN tar -zxvf logstash-oss-with-opensearch-output-plugin-$LOGSTASH_VER-linux-x64.tar.gz
 
-FROM fedora:38@sha256:3f01c8f79691df76331cb4bb0944794a60850475e859c15e49513fcbe0a3d88a AS release
+FROM fedora:40@sha256:5ce8497aeea599bf6b54ab3979133923d82aaa4f6ca5ced1812611b197c79eb0 AS release
 
 COPY --from=build logstash-* /usr/share/logstash
 

debugd/metricbeat/Dockerfile

@@ -1,4 +1,4 @@
-FROM fedora:38@sha256:3f01c8f79691df76331cb4bb0944794a60850475e859c15e49513fcbe0a3d88a AS release
+FROM fedora:40@sha256:5ce8497aeea599bf6b54ab3979133923d82aaa4f6ca5ced1812611b197c79eb0 AS release
 
 RUN dnf install -y https://artifacts.elastic.co/downloads/beats/metricbeat/metricbeat-8.9.2-x86_64.rpm
 

docs/screencasts/docker/Dockerfile

@@ -1,4 +1,4 @@
-FROM ubuntu:22.04@sha256:2b7412e6465c3c7fc5bb21d3e6f1917c167358449fecac8176c6e496e5c1f05f
+FROM ubuntu:22.04@sha256:a6d2b38300ce017add71440577d5b0a90460d0e57fd7aec21dd0d1b0761bbfb2
 
 # Install requirements
 RUN apt-get update && apt-get install -y software-properties-common &&\

e2e/miniconstellation/main.sh.in

@@ -28,6 +28,9 @@ terraform apply -auto-approve
 terraform output -raw ssh_private_key > id_rsa
 chmod 600 id_rsa
 
+rg_name=$(terraform output -raw rg_name)
+echo "rgname=$rg_name" >> $GITHUB_OUTPUT
+
 azure_vm_ip=$(terraform output -raw public_ip)
 
 echo "::endgroup::"

e2e/miniconstellation/output.tf

@@ -9,3 +9,9 @@ output "ssh_private_key" {
   sensitive  = true
   depends_on = [tls_private_key.ssh_key]
 }
+
+output "rg_name" {
+  value = "e2e-mini-${random_string.suffix.result}"
+  sensitive = false
+  depends_on = [random_string.suffix]
+}

flake.lock

@@ -5,11 +5,11 @@
         "systems": "systems"
       },
       "locked": {
-        "lastModified": 1705309234,
-        "narHash": "sha256-uNRRNRKmJyCRC/8y1RqBkqWBLM034y4qN7EprSdmgyA=",
+        "lastModified": 1710146030,
+        "narHash": "sha256-SZ5L6eA7HJ/nmkzGG7/ISclqe6oZdOZTNoesiInkXPQ=",
         "owner": "numtide",
         "repo": "flake-utils",
-        "rev": "1ef2e671c3b0c19053962c07dbda38332dcebf26",
+        "rev": "b1d9ab70662946ef0850d488da1c9019f3a9752a",
         "type": "github"
       },
       "original": {
@@ -20,11 +20,11 @@
     },
     "nixpkgsUnstable": {
       "locked": {
-        "lastModified": 1707939175,
-        "narHash": "sha256-D1xan0lgxbmXDyzVqXTiSYHLmAMrMRdD+alKzEO/p3w=",
+        "lastModified": 1715161350,
+        "narHash": "sha256-5ZU8DVwHO0gjw2sKoKkToYOXMJFRBpRsa17Ebm8fgj0=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "f7e8132daca31b1e3859ac0fb49741754375ac3d",
+        "rev": "c4200cb341ee794775185ecd4105fbbfb5ca73a0",
         "type": "github"
       },
       "original": {
@@ -66,11 +66,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1708338970,
-        "narHash": "sha256-eX86SesWRQN7S5g6sXgKG5Q6KJLcip2MxJIIIM1Lj+E=",
+        "lastModified": 1714468720,
+        "narHash": "sha256-i/RVCoeQLeOaPaEtJS/l+42CVohMucA6cBBt0mdJ4uE=",
         "owner": "edgelesssys",
         "repo": "uplosi",
-        "rev": "32e47c6d2445cdc76b8458f785b921431c2ae609",
+        "rev": "7c881351a2f7c664d04c4e235562e5b427b167f2",
         "type": "github"
       },
       "original": {

go.mod

@@ -34,8 +34,6 @@ replace (
 )
 
 replace (
-	github.com/google/go-sev-guest => github.com/google/go-sev-guest v0.0.0-20230928233922-2dcbba0a4b9d
-	github.com/google/go-tpm => github.com/thomasten/go-tpm v0.0.0-20230629092004-f43f8e2a59eb
 	github.com/martinjungblut/go-cryptsetup => github.com/daniel-weisse/go-cryptsetup v0.0.0-20230705150314-d8c07bd1723c
 	github.com/tink-crypto/tink-go/v2 v2.0.0 => github.com/derpsteb/tink-go/v2 v2.0.0-20231002051717-a808e454eed6
 )
@@ -43,7 +41,7 @@ replace (
 require (
 	cloud.google.com/go/compute v1.26.0
 	cloud.google.com/go/compute/metadata v0.3.0
-	cloud.google.com/go/kms v1.15.9
+	cloud.google.com/go/kms v1.16.0
 	cloud.google.com/go/secretmanager v1.13.0
 	cloud.google.com/go/storage v1.40.0
 	dario.cat/mergo v1.0.0
@@ -55,25 +53,25 @@ require (
 	github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets v1.1.0
 	github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.3.2
 	github.com/BurntSushi/toml v1.3.2
-	github.com/aws/aws-sdk-go v1.52.4
+	github.com/aws/aws-sdk-go v1.53.0
 	github.com/aws/aws-sdk-go-v2 v1.26.1
-	github.com/aws/aws-sdk-go-v2/config v1.27.11
-	github.com/aws/aws-sdk-go-v2/credentials v1.17.11
+	github.com/aws/aws-sdk-go-v2/config v1.27.13
+	github.com/aws/aws-sdk-go-v2/credentials v1.17.13
 	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.1
-	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.16.15
-	github.com/aws/aws-sdk-go-v2/service/autoscaling v1.40.5
-	github.com/aws/aws-sdk-go-v2/service/cloudfront v1.36.0
-	github.com/aws/aws-sdk-go-v2/service/ec2 v1.160.0
-	github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 v1.30.5
-	github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi v1.21.4
-	github.com/aws/aws-sdk-go-v2/service/s3 v1.53.1
-	github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.28.6
+	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.16.17
+	github.com/aws/aws-sdk-go-v2/service/autoscaling v1.40.6
+	github.com/aws/aws-sdk-go-v2/service/cloudfront v1.36.1
+	github.com/aws/aws-sdk-go-v2/service/ec2 v1.161.1
+	github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 v1.30.6
+	github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi v1.21.5
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.53.2
+	github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.28.7
 	github.com/aws/smithy-go v1.20.2
-	github.com/bazelbuild/buildtools v0.0.0-20240417164354-2bc4b5ebbaaf
+	github.com/bazelbuild/buildtools v0.0.0-20240422193413-1429e15ae755
 	github.com/bazelbuild/rules_go v0.47.1
 	github.com/coreos/go-systemd/v22 v22.5.0
-	github.com/docker/docker v26.1.1+incompatible
-	github.com/edgelesssys/go-azguestattestation v0.0.0-20230707101700-a683be600fcf
+	github.com/docker/docker v26.1.2+incompatible
+	github.com/edgelesssys/go-azguestattestation v0.0.0-20240513062303-05f8770a633d
 	github.com/edgelesssys/go-tdx-qpl v0.0.0-20240123150912-dcad3c41ec5f
 	github.com/foxboron/go-uefi v0.0.0-20240128152106-48be911532c2
 	github.com/fsnotify/fsnotify v1.7.0
@@ -81,9 +79,9 @@ require (
 	github.com/go-playground/universal-translator v0.18.1
 	github.com/go-playground/validator/v10 v10.20.0
 	github.com/golang-jwt/jwt/v5 v5.2.1
-	github.com/google/go-sev-guest v0.9.3
+	github.com/google/go-sev-guest v0.11.1
 	github.com/google/go-tdx-guest v0.3.1
-	github.com/google/go-tpm v0.9.0
+	github.com/google/go-tpm v0.9.1-0.20240510201744-5c2f0887e003
 	github.com/google/go-tpm-tools v0.4.4
 	github.com/google/uuid v1.6.0
 	github.com/googleapis/gax-go/v2 v2.12.4
@@ -123,7 +121,7 @@ require (
 	github.com/spf13/cobra v1.8.0
 	github.com/spf13/pflag v1.0.5
 	github.com/stretchr/testify v1.9.0
-	github.com/tink-crypto/tink-go/v2 v2.0.0
+	github.com/tink-crypto/tink-go/v2 v2.1.0
 	github.com/vincent-petithory/dataurl v1.0.0
 	go.etcd.io/etcd/api/v3 v3.5.13
 	go.etcd.io/etcd/client/pkg/v3 v3.5.13
@@ -135,7 +133,7 @@ require (
 	golang.org/x/sys v0.20.0
 	golang.org/x/text v0.15.0
 	golang.org/x/tools v0.21.0
-	google.golang.org/api v0.178.0
+	google.golang.org/api v0.180.0
 	google.golang.org/grpc v1.63.2
 	google.golang.org/protobuf v1.34.1
 	gopkg.in/yaml.v3 v3.0.1
@@ -146,10 +144,10 @@ require (
 	k8s.io/apimachinery v0.30.0
 	k8s.io/apiserver v0.30.0
 	k8s.io/client-go v0.30.0
-	k8s.io/cluster-bootstrap v0.29.0
-	k8s.io/kubelet v0.29.0
-	k8s.io/kubernetes v1.29.4
-	k8s.io/mount-utils v0.29.0
+	k8s.io/cluster-bootstrap v0.30.0
+	k8s.io/kubelet v0.30.0
+	k8s.io/kubernetes v1.30.0
+	k8s.io/mount-utils v0.30.0
 	k8s.io/utils v0.0.0-20240502163921-fe8a2dddb1d0
 	libvirt.org/go/libvirt v1.10003.0
 	sigs.k8s.io/controller-runtime v0.18.2
@@ -158,9 +156,10 @@ require (
 
 require (
 	cloud.google.com/go v0.112.2 // indirect
-	cloud.google.com/go/auth v0.3.0 // indirect
+	cloud.google.com/go/auth v0.4.1 // indirect
 	cloud.google.com/go/auth/oauth2adapt v0.2.2 // indirect
-	cloud.google.com/go/iam v1.1.7 // indirect
+	cloud.google.com/go/iam v1.1.8 // indirect
+	cloud.google.com/go/longrunning v0.5.7 // indirect
 	github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 // indirect
 	github.com/Azure/azure-sdk-for-go/sdk/internal v1.6.0 // indirect
 	github.com/Azure/azure-sdk-for-go/sdk/keyvault/azkeys v0.10.0 // indirect
@@ -196,9 +195,9 @@ require (
 	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.7 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.7 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.5 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sso v1.20.5 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.23.4 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sts v1.28.6 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sso v1.20.6 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.24.0 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sts v1.28.7 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/blang/semver v3.5.1+incompatible // indirect
 	github.com/blang/semver/v4 v4.0.0 // indirect
@@ -252,9 +251,9 @@ require (
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/golang/protobuf v1.5.4 // indirect
 	github.com/google/btree v1.1.2 // indirect
-	github.com/google/certificate-transparency-go v1.1.6 // indirect
+	github.com/google/certificate-transparency-go v1.1.8 // indirect
 	github.com/google/gnostic-models v0.6.8 // indirect
-	github.com/google/go-attestation v0.5.0 // indirect
+	github.com/google/go-attestation v0.5.1 // indirect
 	github.com/google/go-cmp v0.6.0 // indirect
 	github.com/google/go-configfs-tsm v0.2.2 // indirect
 	github.com/google/go-containerregistry v0.19.0 // indirect
@@ -265,7 +264,7 @@ require (
 	github.com/google/s2a-go v0.1.7 // indirect
 	github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
 	github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect
-	github.com/gorilla/mux v1.8.0 // indirect
+	github.com/gorilla/mux v1.8.1 // indirect
 	github.com/gorilla/websocket v1.5.0 // indirect
 	github.com/gosuri/uitable v0.0.4 // indirect
 	github.com/gregjones/httpcache v0.0.0-20180305231024-9cad4c3443a7 // indirect
@@ -372,7 +371,7 @@ require (
 	gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
 	google.golang.org/appengine v1.6.8 // indirect
 	google.golang.org/genproto v0.0.0-20240401170217-c3f982113cda // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20240429193739-8cf5692501f6 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20240506185236-b8a5c65736ae // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20240429193739-8cf5692501f6 // indirect
 	gopkg.in/go-jose/go-jose.v2 v2.6.3 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect

go.sum

@@ -1,18 +1,20 @@
 cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
 cloud.google.com/go v0.112.2 h1:ZaGT6LiG7dBzi6zNOvVZwacaXlmf3lRqnC4DQzqyRQw=
 cloud.google.com/go v0.112.2/go.mod h1:iEqjp//KquGIJV/m+Pk3xecgKNhV+ry+vVTsy4TbDms=
-cloud.google.com/go/auth v0.3.0 h1:PRyzEpGfx/Z9e8+lHsbkoUVXD0gnu4MNmm7Gp8TQNIs=
-cloud.google.com/go/auth v0.3.0/go.mod h1:lBv6NKTWp8E3LPzmO1TbiiRKc4drLOfHsgmlH9ogv5w=
+cloud.google.com/go/auth v0.4.1 h1:Z7YNIhlWRtrnKlZke7z3GMqzvuYzdc2z98F9D1NV5Hg=
+cloud.google.com/go/auth v0.4.1/go.mod h1:QVBuVEKpCn4Zp58hzRGvL0tjRGU0YqdRTdCHM1IHnro=
 cloud.google.com/go/auth/oauth2adapt v0.2.2 h1:+TTV8aXpjeChS9M+aTtN/TjdQnzJvmzKFt//oWu7HX4=
 cloud.google.com/go/auth/oauth2adapt v0.2.2/go.mod h1:wcYjgpZI9+Yu7LyYBg4pqSiaRkfEK3GQcpb7C/uyF1Q=
 cloud.google.com/go/compute v1.26.0 h1:uHf0NN2nvxl1Gh4QO83yRCOdMK4zivtMS5gv0dEX0hg=
 cloud.google.com/go/compute v1.26.0/go.mod h1:T9RIRap4pVHCGUkVFRJ9hygT3KCXjip41X1GgWtBBII=
 cloud.google.com/go/compute/metadata v0.3.0 h1:Tz+eQXMEqDIKRsmY3cHTL6FVaynIjX2QxYC4trgAKZc=
 cloud.google.com/go/compute/metadata v0.3.0/go.mod h1:zFmK7XCadkQkj6TtorcaGlCW1hT1fIilQDwofLpJ20k=
-cloud.google.com/go/iam v1.1.7 h1:z4VHOhwKLF/+UYXAJDFwGtNF0b6gjsW1Pk9Ml0U/IoM=
-cloud.google.com/go/iam v1.1.7/go.mod h1:J4PMPg8TtyurAUvSmPj8FF3EDgY1SPRZxcUGrn7WXGA=
-cloud.google.com/go/kms v1.15.9 h1:ouZjTxCqDNEdxWfaAAbRzG22s/2iewRw6JPARQL+0vc=
-cloud.google.com/go/kms v1.15.9/go.mod h1:5v/R/RRuBUVO+eJioGcqENr3syh8ZqNn1y1Wc9DjM+4=
+cloud.google.com/go/iam v1.1.8 h1:r7umDwhj+BQyz0ScZMp4QrGXjSTI3ZINnpgU2nlB/K0=
+cloud.google.com/go/iam v1.1.8/go.mod h1:GvE6lyMmfxXauzNq8NbgJbeVQNspG+tcdL/W8QO1+zE=
+cloud.google.com/go/kms v1.16.0 h1:1yZsRPhmargZOmY+fVAh8IKiR9HzCb0U1zsxb5g2nRY=
+cloud.google.com/go/kms v1.16.0/go.mod h1:olQUXy2Xud+1GzYfiBO9N0RhjsJk5IJLU6n/ethLXVc=
+cloud.google.com/go/longrunning v0.5.7 h1:WLbHekDbjK1fVFD3ibpFFVoyizlLRl73I7YKuAKilhU=
+cloud.google.com/go/longrunning v0.5.7/go.mod h1:8GClkudohy1Fxm3owmBGid8W0pSgodEMwEAztp38Xng=
 cloud.google.com/go/secretmanager v1.13.0 h1:nQ/Ca2Gzm/OEP8tr1hiFdHRi5wAnAmsm9qTjwkivyrQ=
 cloud.google.com/go/secretmanager v1.13.0/go.mod h1:yWdfNmM2sLIiyv6RM6VqWKeBV7CdS0SO3ybxJJRhBEs=
 cloud.google.com/go/storage v1.40.0 h1:VEpDQV5CJxFmJ6ueWNsKxcr1QAYOXEgxDa+sBbJahPw=
@@ -115,20 +117,20 @@ github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5/go.mod h1:wHh0iHkY
 github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so=
 github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2/go.mod h1:WaHUgvxTVq04UNunO+XhnAqY/wQc+bxr74GqbsZ/Jqw=
 github.com/aws/aws-sdk-go v1.30.27/go.mod h1:5zCpMtNQVjRREroY7sYe8lOMRSxkhG6MZveU8YkpAk0=
-github.com/aws/aws-sdk-go v1.52.4 h1:9VsBVJ2TKf8xPP3+yIPGSYcEBIEymXsJzQoFgQuyvA0=
-github.com/aws/aws-sdk-go v1.52.4/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
+github.com/aws/aws-sdk-go v1.53.0 h1:MMo1x1ggPPxDfHMXJnQudTbGXYlD4UigUAud1DJxPVo=
+github.com/aws/aws-sdk-go v1.53.0/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
 github.com/aws/aws-sdk-go-v2 v1.26.1 h1:5554eUqIYVWpU0YmeeYZ0wU64H2VLBs8TlhRB2L+EkA=
 github.com/aws/aws-sdk-go-v2 v1.26.1/go.mod h1:ffIFB97e2yNsv4aTSGkqtHnppsIJzw7G7BReUZ3jCXM=
 github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.2 h1:x6xsQXGSmW6frevwDA+vi/wqhp1ct18mVXYN08/93to=
 github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.2/go.mod h1:lPprDr1e6cJdyYeGXnRaJoP4Md+cDBvi2eOj00BlGmg=
-github.com/aws/aws-sdk-go-v2/config v1.27.11 h1:f47rANd2LQEYHda2ddSCKYId18/8BhSRM4BULGmfgNA=
-github.com/aws/aws-sdk-go-v2/config v1.27.11/go.mod h1:SMsV78RIOYdve1vf36z8LmnszlRWkwMQtomCAI0/mIE=
-github.com/aws/aws-sdk-go-v2/credentials v1.17.11 h1:YuIB1dJNf1Re822rriUOTxopaHHvIq0l/pX3fwO+Tzs=
-github.com/aws/aws-sdk-go-v2/credentials v1.17.11/go.mod h1:AQtFPsDH9bI2O+71anW6EKL+NcD7LG3dpKGMV4SShgo=
+github.com/aws/aws-sdk-go-v2/config v1.27.13 h1:WbKW8hOzrWoOA/+35S5okqO/2Ap8hkkFUzoW8Hzq24A=
+github.com/aws/aws-sdk-go-v2/config v1.27.13/go.mod h1:XLiyiTMnguytjRER7u5RIkhIqS8Nyz41SwAWb4xEjxs=
+github.com/aws/aws-sdk-go-v2/credentials v1.17.13 h1:XDCJDzk/u5cN7Aple7D/MiAhx1Rjo/0nueJ0La8mRuE=
+github.com/aws/aws-sdk-go-v2/credentials v1.17.13/go.mod h1:FMNcjQrmuBYvOTZDtOLCIu0esmxjF7RuA/89iSXWzQI=
 github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.1 h1:FVJ0r5XTHSmIHJV6KuDmdYhEpvlHpiSd38RQWhut5J4=
 github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.1/go.mod h1:zusuAeqezXzAB24LGuzuekqMAEgWkVYukBec3kr3jUg=
-github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.16.15 h1:7Zwtt/lP3KNRkeZre7soMELMGNoBrutx8nobg1jKWmo=
-github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.16.15/go.mod h1:436h2adoHb57yd+8W+gYPrrA9U/R/SuAuOO42Ushzhw=
+github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.16.17 h1:9b1Os1s11mF5qTIKLgSsyPG810di2+ySSLIIt9bwe9I=
+github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.16.17/go.mod h1:9Wp7tDOMhv0+sb/FTRAkbHNQ7abYDnoJRzm5AAtCnTc=
 github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.5 h1:aw39xVGeRWlWx9EzGVnhOR4yOjQDHPQ6o6NmBlscyQg=
 github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.5/go.mod h1:FSaRudD0dXiMPK2UjknVwwTYyZMRsHv3TtkabsZih5I=
 github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.5 h1:PG1F3OD1szkuQPzDw3CIQsRIrtTlUC3lP84taWzHlq0=
@@ -137,14 +139,14 @@ github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 h1:hT8rVHwugYE2lEfdFE0QWVo81lF7
 github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0/go.mod h1:8tu/lYfQfFe6IGnaOdrpVgEL2IrrDOf6/m9RQum4NkY=
 github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.5 h1:81KE7vaZzrl7yHBYHVEzYB8sypz11NMOZ40YlWvPxsU=
 github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.5/go.mod h1:LIt2rg7Mcgn09Ygbdh/RdIm0rQ+3BNkbP1gyVMFtRK0=
-github.com/aws/aws-sdk-go-v2/service/autoscaling v1.40.5 h1:vhdJymxlWS2qftzLiuCjSswjXBRLGfzo/BEE9LDveBA=
-github.com/aws/aws-sdk-go-v2/service/autoscaling v1.40.5/go.mod h1:ZErgk/bPaaZIpj+lUWGlwI1A0UFhSIscgnCPzTLnb2s=
-github.com/aws/aws-sdk-go-v2/service/cloudfront v1.36.0 h1:KbT1H0KXc26/M6km03gBWz5v1M5aOq4Cwo+aXJ2BpfM=
-github.com/aws/aws-sdk-go-v2/service/cloudfront v1.36.0/go.mod h1:Pphkts8iBnexoEpcMti5fUvN3/yoGRLtl2heOeppF70=
-github.com/aws/aws-sdk-go-v2/service/ec2 v1.160.0 h1:ooy0OFbrdSwgk32OFGPnvBwry5ySYCKkgTEbQ2hejs8=
-github.com/aws/aws-sdk-go-v2/service/ec2 v1.160.0/go.mod h1:xejKuuRDjz6z5OqyeLsz01MlOqqW7CqpAB4PabNvpu8=
-github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 v1.30.5 h1:/x2u/TOx+n17U+gz98TOw1HKJom0EOqrhL4SjrHr0cQ=
-github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 v1.30.5/go.mod h1:e1McVqsud0JOERidvppLEHnuCdh/X6MRyL5L0LseAUk=
+github.com/aws/aws-sdk-go-v2/service/autoscaling v1.40.6 h1:IDoEdCkKRy7iPlRVSuDATGE57xUjrk5i1M9eWPYwr/Y=
+github.com/aws/aws-sdk-go-v2/service/autoscaling v1.40.6/go.mod h1:ZErgk/bPaaZIpj+lUWGlwI1A0UFhSIscgnCPzTLnb2s=
+github.com/aws/aws-sdk-go-v2/service/cloudfront v1.36.1 h1://GRw/PrpnUyWBJh6KvUvR9AgkDBhclzaj3HKGxRoCw=
+github.com/aws/aws-sdk-go-v2/service/cloudfront v1.36.1/go.mod h1:Pphkts8iBnexoEpcMti5fUvN3/yoGRLtl2heOeppF70=
+github.com/aws/aws-sdk-go-v2/service/ec2 v1.161.1 h1:NbjXshriDs5bGeqKvrOF70L41X0aCMC60ImN2vkcQAc=
+github.com/aws/aws-sdk-go-v2/service/ec2 v1.161.1/go.mod h1:xejKuuRDjz6z5OqyeLsz01MlOqqW7CqpAB4PabNvpu8=
+github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 v1.30.6 h1:P5kMcIzrz4Y7GIkvmkosgv/0cs1Crk/VLo5pBhrTWGI=
+github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 v1.30.6/go.mod h1:e1McVqsud0JOERidvppLEHnuCdh/X6MRyL5L0LseAUk=
 github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.2 h1:Ji0DY1xUsUr3I8cHps0G+XM3WWU16lP6yG8qu1GAZAs=
 github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.2/go.mod h1:5CsjAbs3NlGQyZNFACh+zztPDI7fU6eW9QsxjfnuBKg=
 github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.7 h1:ZMeFZ5yk+Ek+jNr1+uwCd2tG89t6oTS5yVWpa6yy2es=
@@ -153,22 +155,22 @@ github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.7 h1:ogRAwT1/g
 github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.7/go.mod h1:YCsIZhXfRPLFFCl5xxY+1T9RKzOKjCut+28JSX2DnAk=
 github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.5 h1:f9RyWNtS8oH7cZlbn+/JNPpjUk5+5fLd5lM9M0i49Ys=
 github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.5/go.mod h1:h5CoMZV2VF297/VLhRhO1WF+XYWOzXo+4HsObA4HjBQ=
-github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi v1.21.4 h1:c1jtPWZSmgMmPkCgwv67GE0ugdEgnLVo/BHR1wl3Dm0=
-github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi v1.21.4/go.mod h1:FWw+Jnx+SlpsrU/NQ/f7f+1RdixTApZiU2o9FOubiDQ=
-github.com/aws/aws-sdk-go-v2/service/s3 v1.53.1 h1:6cnno47Me9bRykw9AEv9zkXE+5or7jz8TsskTTccbgc=
-github.com/aws/aws-sdk-go-v2/service/s3 v1.53.1/go.mod h1:qmdkIIAC+GCLASF7R2whgNrJADz0QZPX+Seiw/i4S3o=
-github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.28.6 h1:TIOEjw0i2yyhmhRry3Oeu9YtiiHWISZ6j/irS1W3gX4=
-github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.28.6/go.mod h1:3Ba++UwWd154xtP4FRX5pUK3Gt4up5sDHCve6kVfE+g=
-github.com/aws/aws-sdk-go-v2/service/sso v1.20.5 h1:vN8hEbpRnL7+Hopy9dzmRle1xmDc7o8tmY0klsr175w=
-github.com/aws/aws-sdk-go-v2/service/sso v1.20.5/go.mod h1:qGzynb/msuZIE8I75DVRCUXw3o3ZyBmUvMwQ2t/BrGM=
-github.com/aws/aws-sdk-go-v2/service/ssooidc v1.23.4 h1:Jux+gDDyi1Lruk+KHF91tK2KCuY61kzoCpvtvJJBtOE=
-github.com/aws/aws-sdk-go-v2/service/ssooidc v1.23.4/go.mod h1:mUYPBhaF2lGiukDEjJX2BLRRKTmoUSitGDUgM4tRxak=
-github.com/aws/aws-sdk-go-v2/service/sts v1.28.6 h1:cwIxeBttqPN3qkaAjcEcsh8NYr8n2HZPkcKgPAi1phU=
-github.com/aws/aws-sdk-go-v2/service/sts v1.28.6/go.mod h1:FZf1/nKNEkHdGGJP/cI2MoIMquumuRK6ol3QQJNDxmw=
+github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi v1.21.5 h1:GR0vFRc5TpN36ppQJjd+gjRRC9vMAHN5C2W53oMWCJU=
+github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi v1.21.5/go.mod h1:FWw+Jnx+SlpsrU/NQ/f7f+1RdixTApZiU2o9FOubiDQ=
+github.com/aws/aws-sdk-go-v2/service/s3 v1.53.2 h1:rq2hglTQM3yHZvOPVMtNvLS5x6hijx7JvRDgKiTNDGQ=
+github.com/aws/aws-sdk-go-v2/service/s3 v1.53.2/go.mod h1:qmdkIIAC+GCLASF7R2whgNrJADz0QZPX+Seiw/i4S3o=
+github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.28.7 h1:4cziOtpDwtgcb+wTYRzz8C+GoH1XySy0p7j4oBbqPQE=
+github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.28.7/go.mod h1:3Ba++UwWd154xtP4FRX5pUK3Gt4up5sDHCve6kVfE+g=
+github.com/aws/aws-sdk-go-v2/service/sso v1.20.6 h1:o5cTaeunSpfXiLTIBx5xo2enQmiChtu1IBbzXnfU9Hs=
+github.com/aws/aws-sdk-go-v2/service/sso v1.20.6/go.mod h1:qGzynb/msuZIE8I75DVRCUXw3o3ZyBmUvMwQ2t/BrGM=
+github.com/aws/aws-sdk-go-v2/service/ssooidc v1.24.0 h1:Qe0r0lVURDDeBQJ4yP+BOrJkvkiCo/3FH/t+wY11dmw=
+github.com/aws/aws-sdk-go-v2/service/ssooidc v1.24.0/go.mod h1:mUYPBhaF2lGiukDEjJX2BLRRKTmoUSitGDUgM4tRxak=
+github.com/aws/aws-sdk-go-v2/service/sts v1.28.7 h1:et3Ta53gotFR4ERLXXHIHl/Uuk1qYpP5uU7cvNql8ns=
+github.com/aws/aws-sdk-go-v2/service/sts v1.28.7/go.mod h1:FZf1/nKNEkHdGGJP/cI2MoIMquumuRK6ol3QQJNDxmw=
 github.com/aws/smithy-go v1.20.2 h1:tbp628ireGtzcHDDmLT/6ADHidqnwgF57XOXZe6tp4Q=
 github.com/aws/smithy-go v1.20.2/go.mod h1:krry+ya/rV9RDcV/Q16kpu6ypI4K2czasz0NC3qS14E=
-github.com/bazelbuild/buildtools v0.0.0-20240417164354-2bc4b5ebbaaf h1:NJPpHVYOUbpKTXp1DU4dL1Ubk8p7wdxfign2lb7QhAM=
-github.com/bazelbuild/buildtools v0.0.0-20240417164354-2bc4b5ebbaaf/go.mod h1:689QdV3hBP7Vo9dJMmzhoYIyo/9iMhEmHkJcnaPRCbo=
+github.com/bazelbuild/buildtools v0.0.0-20240422193413-1429e15ae755 h1:hqhMmuZiSNwCWVHqnpr4DZfIeZ2/aJF7fs207eg7HZo=
+github.com/bazelbuild/buildtools v0.0.0-20240422193413-1429e15ae755/go.mod h1:689QdV3hBP7Vo9dJMmzhoYIyo/9iMhEmHkJcnaPRCbo=
 github.com/bazelbuild/rules_go v0.47.1 h1:9s9FA2l8IAxCbwV97E1WLu5ai21muLNrjZRV0+agTRs=
 github.com/bazelbuild/rules_go v0.47.1/go.mod h1:Dhcz716Kqg1RHNWos+N6MlXNkjNP2EwZQ0LukRKJfMs=
 github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973/go.mod h1:Dwedo/Wpr24TaqPxmxbtue+5NUziq4I4S80YR8gNf3Q=
@@ -181,8 +183,8 @@ github.com/blang/semver/v4 v4.0.0 h1:1PFHFE6yCCTv8C1TeyNNarDzntLi7wMI5i/pzqYIsAM
 github.com/blang/semver/v4 v4.0.0/go.mod h1:IbckMUScFkM3pff0VJDNKRiT6TG/YpiHIM2yvyW5YoQ=
 github.com/bshuster-repo/logrus-logstash-hook v1.0.0 h1:e+C0SB5R1pu//O4MQ3f9cFuPGoOVeF2fE4Og9otCc70=
 github.com/bshuster-repo/logrus-logstash-hook v1.0.0/go.mod h1:zsTqEiSzDgAa/8GZR7E1qaXrhYNDKBYy5/dWPTIflbk=
-github.com/bufbuild/protocompile v0.4.0 h1:LbFKd2XowZvQ/kajzguUp2DC9UEIQhIq77fZZlaQsNA=
-github.com/bufbuild/protocompile v0.4.0/go.mod h1:3v93+mbWn/v3xzN+31nwkJfrEpAUwp+BagBSZWx+TP8=
+github.com/bufbuild/protocompile v0.6.0 h1:Uu7WiSQ6Yj9DbkdnOe7U4mNKp58y9WDMKDn28/ZlunY=
+github.com/bufbuild/protocompile v0.6.0/go.mod h1:YNP35qEYoYGme7QMtz5SBCoN4kL4g12jTtjuzRNdjpE=
 github.com/bugsnag/bugsnag-go v0.0.0-20141110184014-b1d153021fcd h1:rFt+Y/IK1aEZkEHchZRSq9OQbsSzIT/OrI8YFFmRIng=
 github.com/bugsnag/bugsnag-go v0.0.0-20141110184014-b1d153021fcd/go.mod h1:2oa8nejYd4cQ/b0hMIopN0lCRxU0bueqREvZLWFrtK8=
 github.com/bugsnag/osext v0.0.0-20130617224835-0dd3f918b21b h1:otBG+dV+YK+Soembjv71DPz3uX/V/6MMlSyD9JBQ6kQ=
@@ -232,8 +234,6 @@ github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSs
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/derpsteb/tink-go/v2 v2.0.0-20231002051717-a808e454eed6 h1:FVii9oXvddz9sFir5TRYjQKrzJLbVD/hibT+SnRSDzg=
-github.com/derpsteb/tink-go/v2 v2.0.0-20231002051717-a808e454eed6/go.mod h1:QAbyq9LZncomYnScxlfaHImbV4ieNIe6bnu/Xcqqox4=
 github.com/distribution/distribution/v3 v3.0.0-20221208165359-362910506bc2 h1:aBfCb7iqHmDEIp6fBvC/hQUddQfg+3qdYjwzaiP9Hnc=
 github.com/distribution/distribution/v3 v3.0.0-20221208165359-362910506bc2/go.mod h1:WHNsWjnIn2V1LYOrME7e8KxSeKunYHsxEm4am0BUtcI=
 github.com/distribution/reference v0.5.0 h1:/FUIFXtfc/x2gpa5/VGfiGLuOIdYa1t65IKK2OFGvA0=
@@ -244,8 +244,8 @@ github.com/docker/cli v25.0.1+incompatible h1:mFpqnrS6Hsm3v1k7Wa/BO23oz0k121MTbT
 github.com/docker/cli v25.0.1+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
 github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk=
 github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
-github.com/docker/docker v26.1.1+incompatible h1:oI+4kkAgIwwb54b9OC7Xc3hSgu1RlJA/Lln/DF72djQ=
-github.com/docker/docker v26.1.1+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
+github.com/docker/docker v26.1.2+incompatible h1:UVX5ZOrrfTGZZYEP+ZDq3Xn9PdHNXaSYMFPDumMqG2k=
+github.com/docker/docker v26.1.2+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
 github.com/docker/docker-credential-helpers v0.7.0 h1:xtCHsjxogADNZcdv1pKUHXryefjlVRqWqIhk/uXJp0A=
 github.com/docker/docker-credential-helpers v0.7.0/go.mod h1:rETQfLdHNT3foU5kuNkFR1R1V12OJRRO5lzt2D1b5X0=
 github.com/docker/go-connections v0.5.0 h1:USnMq7hx7gwdVZq1L49hLXaFtUdTADjXGp+uj1Br63c=
@@ -258,8 +258,8 @@ github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4
 github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk=
 github.com/docker/libtrust v0.0.0-20160708172513-aabc10ec26b7 h1:UhxFibDNY/bfvqU5CAUmr9zpesgbU6SWc8/B4mflAE4=
 github.com/docker/libtrust v0.0.0-20160708172513-aabc10ec26b7/go.mod h1:cyGadeNEkKy96OOhEzfZl+yxihPEzKnqJwvfuSUqbZE=
-github.com/edgelesssys/go-azguestattestation v0.0.0-20230707101700-a683be600fcf h1:1iKB7b+i7svWC0aKXwggi+kHf0K57g8r9hN4VOpJYYg=
-github.com/edgelesssys/go-azguestattestation v0.0.0-20230707101700-a683be600fcf/go.mod h1:T8Rv3qrCpUJZbKq49OA9tcC1ZbRkGtDxiafsj++LYIE=
+github.com/edgelesssys/go-azguestattestation v0.0.0-20240513062303-05f8770a633d h1:XcoMVhZve0RRkSxFDn9Bs/z4FpHqZ3eHgVNWNCNOkqc=
+github.com/edgelesssys/go-azguestattestation v0.0.0-20240513062303-05f8770a633d/go.mod h1:Lz4QaomI4wU2YbatD4/W7vatW2Q35tnkoJezB1clscc=
 github.com/edgelesssys/go-tdx-qpl v0.0.0-20240123150912-dcad3c41ec5f h1:TCGUmmH50cQBGXPJsn32APf93fmWQXcSMi7pMbDPtV0=
 github.com/edgelesssys/go-tdx-qpl v0.0.0-20240123150912-dcad3c41ec5f/go.mod h1:IC72qyykUIWl0ZmSk53L4xbLCFDBEGZVaujUmPQOEyw=
 github.com/emicklei/go-restful/v3 v3.11.0 h1:rAQeMHw1c7zTmncogyy8VvRZwtkmkZ4FxERmMY4rD+g=
@@ -397,12 +397,12 @@ github.com/gomodule/redigo v1.8.2/go.mod h1:P9dn9mFrCBvWhGE1wpxx6fgq7BAeLBk+UUUz
 github.com/google/btree v1.1.2 h1:xf4v41cLI2Z6FxbKm+8Bu+m8ifhj15JuZ9sa0jZCMUU=
 github.com/google/btree v1.1.2/go.mod h1:qOPhT0dTNdNzV6Z/lhRX0YXUafgPLFUh+gZMl761Gm4=
 github.com/google/certificate-transparency-go v1.0.21/go.mod h1:QeJfpSbVSfYc7RgB3gJFj9cbuQMMchQxrWXz8Ruopmg=
-github.com/google/certificate-transparency-go v1.1.6 h1:SW5K3sr7ptST/pIvNkSVWMiJqemRmkjJPPT0jzXdOOY=
-github.com/google/certificate-transparency-go v1.1.6/go.mod h1:0OJjOsOk+wj6aYQgP7FU0ioQ0AJUmnWPFMqTjQeazPQ=
+github.com/google/certificate-transparency-go v1.1.8 h1:LGYKkgZF7satzgTak9R4yzfJXEeYVAjV6/EAEJOf1to=
+github.com/google/certificate-transparency-go v1.1.8/go.mod h1:bV/o8r0TBKRf1X//iiiSgWrvII4d7/8OiA+3vG26gI8=
 github.com/google/gnostic-models v0.6.8 h1:yo/ABAfM5IMRsS1VnXjTBvUb61tFIHozhlYvRgGre9I=
 github.com/google/gnostic-models v0.6.8/go.mod h1:5n7qKqH0f5wFt+aWF8CW6pZLLNOfYuF5OpfBSENuI8U=
-github.com/google/go-attestation v0.5.0 h1:jXtAWT2sw2Yu8mYU0BC7FDidR+ngxFPSE+pl6IUu3/0=
-github.com/google/go-attestation v0.5.0/go.mod h1:0Tik9y3rzV649Jcr7evbljQHQAsIlJucyqQjYDBqktU=
+github.com/google/go-attestation v0.5.1 h1:jqtOrLk5MNdliTKjPbIPrAaRKJaKW+0LIU2n/brJYms=
+github.com/google/go-attestation v0.5.1/go.mod h1:KqGatdUhg5kPFkokyzSBDxwSCFyRgIgtRkMp6c3lOBQ=
 github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
 github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
@@ -418,10 +418,12 @@ github.com/google/go-configfs-tsm v0.2.2 h1:YnJ9rXIOj5BYD7/0DNnzs8AOp7UcvjfTvt21
 github.com/google/go-configfs-tsm v0.2.2/go.mod h1:EL1GTDFMb5PZQWDviGfZV9n87WeGTR/JUg13RfwkgRo=
 github.com/google/go-containerregistry v0.19.0 h1:uIsMRBV7m/HDkDxE/nXMnv1q+lOOSPlQ/ywc5JbB8Ic=
 github.com/google/go-containerregistry v0.19.0/go.mod h1:u0qB2l7mvtWVR5kNcbFIhFY1hLbf8eeGapA+vbFDCtQ=
-github.com/google/go-sev-guest v0.0.0-20230928233922-2dcbba0a4b9d h1:6o4Z/vQqNUH+cEagfx1Ez5ElK70iZulEXZwmLnRo44I=
-github.com/google/go-sev-guest v0.0.0-20230928233922-2dcbba0a4b9d/go.mod h1:hc1R4R6f8+NcJwITs0L90fYWTsBpd1Ix+Gur15sqHDs=
+github.com/google/go-sev-guest v0.11.1 h1:gnww4U8fHV5DCPz4gykr1s8SEX1fFNcxCBy+vvXN24k=
+github.com/google/go-sev-guest v0.11.1/go.mod h1:qBOfb+JmgsUI3aUyzQoGC13Kpp9zwLeWvuyXmA9q77w=
 github.com/google/go-tdx-guest v0.3.1 h1:gl0KvjdsD4RrJzyLefDOvFOUH3NAJri/3qvaL5m83Iw=
 github.com/google/go-tdx-guest v0.3.1/go.mod h1:/rc3d7rnPykOPuY8U9saMyEps0PZDThLk/RygXm04nE=
+github.com/google/go-tpm v0.9.1-0.20240510201744-5c2f0887e003 h1:gfGQAIxsEEAuYuFvjCGpDnTwisMJOz+rUfJMkk4yTmc=
+github.com/google/go-tpm v0.9.1-0.20240510201744-5c2f0887e003/go.mod h1:h9jEsEECg7gtLis0upRBQU+GhYVH6jMjrFxI8u6bVUY=
 github.com/google/go-tpm-tools v0.4.4 h1:oiQfAIkc6xTy9Fl5NKTeTJkBTlXdHsxAofmQyxBKY98=
 github.com/google/go-tpm-tools v0.4.4/go.mod h1:T8jXkp2s+eltnCDIsXR84/MTcVU9Ja7bh3Mit0pa4AY=
 github.com/google/go-tspi v0.3.0 h1:ADtq8RKfP+jrTyIWIZDIYcKOMecRqNJFOew2IT0Inus=
@@ -455,8 +457,8 @@ github.com/gophercloud/utils v0.0.0-20231010081019-80377eca5d56 h1:sH7xkTfYzxIEg
 github.com/gophercloud/utils v0.0.0-20231010081019-80377eca5d56/go.mod h1:VSalo4adEk+3sNkmVJLnhHoOyOYYS8sTWLG4mv5BKto=
 github.com/gorilla/handlers v1.5.1 h1:9lRY6j8DEeeBT10CvO9hGW0gmky0BprnvDI5vfhUHH4=
 github.com/gorilla/handlers v1.5.1/go.mod h1:t8XrUpc4KVXb7HGyJ4/cEnwQiaxrX/hz1Zv/4g96P1Q=
-github.com/gorilla/mux v1.8.0 h1:i40aqfkR1h2SlN9hojwV5ZA91wcXFOvkdNIeFDP5koI=
-github.com/gorilla/mux v1.8.0/go.mod h1:DVbg23sWSpFRCP0SfiEN6jmj59UnW/n46BH5rLB71So=
+github.com/gorilla/mux v1.8.1 h1:TuBL49tXwgrFYWhqrNgrUNEY92u81SPhu7sTdzQEiWY=
+github.com/gorilla/mux v1.8.1/go.mod h1:AKf9I4AEqPTmMytcMc0KkNouC66V3BtZ4qD5fmWSiMQ=
 github.com/gorilla/websocket v1.4.2/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
 github.com/gorilla/websocket v1.5.0 h1:PPwGk2jz7EePpoHN/+ClbZu8SPxiqlu12wZP/3sWmnc=
 github.com/gorilla/websocket v1.5.0/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
@@ -550,8 +552,8 @@ github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 h1:BQSFePA1RWJOl
 github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99/go.mod h1:1lJo3i6rXxKeerYnT8Nvf0QmHCRC1n8sfWVwXF2Frvo=
 github.com/jedisct1/go-minisign v0.0.0-20211028175153-1c139d1cc84b h1:ZGiXF8sz7PDk6RgkP+A/SFfUD0ZR/AgG6SpRNEDKZy8=
 github.com/jedisct1/go-minisign v0.0.0-20211028175153-1c139d1cc84b/go.mod h1:hQmNrgofl+IY/8L+n20H6E6PWBBTokdsv+q49j0QhsU=
-github.com/jhump/protoreflect v1.15.1 h1:HUMERORf3I3ZdX05WaQ6MIpd/NJ434hTp5YiKgfCL6c=
-github.com/jhump/protoreflect v1.15.1/go.mod h1:jD/2GMKKE6OqX8qTjhADU1e6DShO+gavG9e0Q693nKo=
+github.com/jhump/protoreflect v1.15.3 h1:6SFRuqU45u9hIZPJAoZ8c28T3nK64BNdp9w6jFonzls=
+github.com/jhump/protoreflect v1.15.3/go.mod h1:4ORHmSBmlCW8fh3xHmJMGyul1zNqZK4Elxc8qKP+p1k=
 github.com/jmespath/go-jmespath v0.3.0/go.mod h1:9QtRXoHjLGCJ5IBSaohpXITPlowMeeYCZ7fLUTSywik=
 github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=
 github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo=
@@ -628,8 +630,8 @@ github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D
 github.com/mattn/go-runewidth v0.0.13 h1:lTGmDsbAYt5DmK6OnoV7EuIF1wEIFAcxld6ypU4OSgU=
 github.com/mattn/go-runewidth v0.0.13/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w=
 github.com/mattn/go-sqlite3 v1.14.6/go.mod h1:NyWgC/yNuGj7Q9rpYnZvas74GogHl5/Z4A/KQRfk6bU=
-github.com/mattn/go-sqlite3 v1.14.16 h1:yOQRA0RpS5PFz/oikGwBEqvAWhWg5ufRz4ETLjwpU1Y=
-github.com/mattn/go-sqlite3 v1.14.16/go.mod h1:2eHXhiwb8IkHr+BDWZGa96P6+rkvnG63S2DGjv9HUNg=
+github.com/mattn/go-sqlite3 v1.14.22 h1:2gZY6PC6kBnID23Tichd1K+Z0oS6nE/XwU+Vz/5o4kU=
+github.com/mattn/go-sqlite3 v1.14.22/go.mod h1:Uh1q+B4BYcTPb+yiD3kU8Ct7aC0hY9fxUwlHK0RXw+Y=
 github.com/matttproud/golang_protobuf_extensions v1.0.1/go.mod h1:D8He9yQNgCq6Z5Ld7szi9bcBfOoFv/3dc6xSMkL2PC0=
 github.com/miekg/dns v1.1.55 h1:GoQ4hpsj0nFLYe+bWiCToyrBEJXkQfOOIvFGFy0lEgo=
 github.com/miekg/dns v1.1.55/go.mod h1:uInx36IzPl7FYnDcMeVWxj9byh7DutNykX4G9Sj60FY=
@@ -795,8 +797,8 @@ github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsT
 github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
 github.com/theupdateframework/go-tuf v0.7.0 h1:CqbQFrWo1ae3/I0UCblSbczevCCbS31Qvs5LdxRWqRI=
 github.com/theupdateframework/go-tuf v0.7.0/go.mod h1:uEB7WSY+7ZIugK6R1hiBMBjQftaFzn7ZCDJcp1tCUug=
-github.com/thomasten/go-tpm v0.0.0-20230629092004-f43f8e2a59eb h1:840nUyrM9df2aLuzWuIkYx/DrUbX4KQZO6B9LD45aWo=
-github.com/thomasten/go-tpm v0.0.0-20230629092004-f43f8e2a59eb/go.mod h1:FkNVkc6C+IsvDI9Jw1OveJmxGZUUaKxtrpOS47QWKfU=
+github.com/tink-crypto/tink-go/v2 v2.1.0 h1:QXFBguwMwTIaU17EgZpEJWsUSc60b1BAGTzBIoMdmok=
+github.com/tink-crypto/tink-go/v2 v2.1.0/go.mod h1:y1TnYFt1i2eZVfx4OGc+C+EMp4CoKWAw2VSEuoicHHI=
 github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 h1:e/5i7d4oYZ+C1wj2THlRK+oAhjeS/TRQwMfkIuet3w0=
 github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399/go.mod h1:LdwHTNJT99C5fTAzDz0ud328OgXz+gierycbcIx2fRs=
 github.com/transparency-dev/merkle v0.0.2 h1:Q9nBoQcZcgPamMkGn7ghV8XiTZ/kRxn1yCG81+twTK4=
@@ -858,8 +860,8 @@ go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0 h1:jq9TW8u
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0/go.mod h1:p8pYQP+m5XfbZm9fxtSKAbM6oIllS7s2AfxrChvc7iw=
 go.opentelemetry.io/otel v1.24.0 h1:0LAOdjNmQeSTzGBzduGe/rU4tZhMwL5rWgtp9Ku5Jfo=
 go.opentelemetry.io/otel v1.24.0/go.mod h1:W7b9Ozg4nkF5tWI5zsXkaKKDjdVjpD4oAt9Qi/MArHo=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.19.0 h1:Mne5On7VWdx7omSrSSZvM4Kw7cS7NQkOOmLcgscI51U=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.19.0/go.mod h1:IPtUMKL4O3tH5y+iXVyAXqpAwMuzC1IrxVS81rummfE=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.20.0 h1:DeFD0VgTZ+Cj6hxravYYZE2W4GlneVH81iAOPjZkzk8=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.20.0/go.mod h1:GijYcYmNpX1KazD5JmWGsi4P7dDTTTnfv1UbGn84MnU=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.19.0 h1:IeMeyr1aBvBiPVYihXIaeIZba6b8E1bYp7lbdxK8CQg=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.19.0/go.mod h1:oVdCUtjq9MK9BlS7TtucsQwUcXcymNiEDjgDD2jMtZU=
 go.opentelemetry.io/otel/metric v1.24.0 h1:6EhoGWWK28x1fbpA4tYTOWBkPefTDQnb8WSGXlc88kI=
@@ -1011,8 +1013,8 @@ golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 h1:+cNy6SZtPcJQH3LJVLOSm
 golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028/go.mod h1:NDW/Ps6MPRej6fsCIbMTohpP40sJ/P/vI1MoTEGwX90=
 gomodules.xyz/jsonpatch/v2 v2.4.0 h1:Ci3iUJyx9UeRx7CeFN8ARgGbkESwJK+KB9lLcWxY/Zw=
 gomodules.xyz/jsonpatch/v2 v2.4.0/go.mod h1:AH3dM2RI6uoBZxn3LVrfvJ3E0/9dG4cSrbuBJT4moAY=
-google.golang.org/api v0.178.0 h1:yoW/QMI4bRVCHF+NWOTa4cL8MoWL3Jnuc7FlcFF91Ok=
-google.golang.org/api v0.178.0/go.mod h1:84/k2v8DFpDRebpGcooklv/lais3MEfqpaBLA12gl2U=
+google.golang.org/api v0.180.0 h1:M2D87Yo0rGBPWpo1orwfCLehUUL6E7/TYe5gvMQWDh4=
+google.golang.org/api v0.180.0/go.mod h1:51AiyoEg1MJPSZ9zvklA8VnRILPXxn1iVen9v25XHAE=
 google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
 google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
 google.golang.org/appengine v1.6.8 h1:IhEN5q69dyKagZPYMSdIjS2HqprW324FRQZJcGqPAsM=
@@ -1022,8 +1024,8 @@ google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98
 google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo=
 google.golang.org/genproto v0.0.0-20240401170217-c3f982113cda h1:wu/KJm9KJwpfHWhkkZGohVC6KRrc1oJNr4jwtQMOQXw=
 google.golang.org/genproto v0.0.0-20240401170217-c3f982113cda/go.mod h1:g2LLCvCeCSir/JJSWosk19BR4NVxGqHUC6rxIRsd7Aw=
-google.golang.org/genproto/googleapis/api v0.0.0-20240429193739-8cf5692501f6 h1:DTJM0R8LECCgFeUwApvcEJHz85HLagW8uRENYxHh1ww=
-google.golang.org/genproto/googleapis/api v0.0.0-20240429193739-8cf5692501f6/go.mod h1:10yRODfgim2/T8csjQsMPgZOMvtytXKTDRzH6HRGzRw=
+google.golang.org/genproto/googleapis/api v0.0.0-20240506185236-b8a5c65736ae h1:AH34z6WAGVNkllnKs5raNq3yRq93VnjBG6rpfub/jYk=
+google.golang.org/genproto/googleapis/api v0.0.0-20240506185236-b8a5c65736ae/go.mod h1:FfiGhwUm6CJviekPrc0oJ+7h29e+DmWU6UtjX0ZvI7Y=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20240429193739-8cf5692501f6 h1:DujSIu+2tC9Ht0aPNA7jgj23Iq8Ewi5sgkQ++wdvonE=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20240429193739-8cf5692501f6/go.mod h1:WtryC6hu0hhx87FDGxWCDptyssuo68sk10vYjF+T9fY=
 google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
@@ -1087,8 +1089,8 @@ k8s.io/cli-runtime v0.29.0 h1:q2kC3cex4rOBLfPOnMSzV2BIrrQlx97gxHJs21KxKS4=
 k8s.io/cli-runtime v0.29.0/go.mod h1:VKudXp3X7wR45L+nER85YUzOQIru28HQpXr0mTdeCrk=
 k8s.io/client-go v0.30.0 h1:sB1AGGlhY/o7KCyCEQ0bPWzYDL0pwOZO4vAtTSh/gJQ=
 k8s.io/client-go v0.30.0/go.mod h1:g7li5O5256qe6TYdAMyX/otJqMhIiGgTapdLchhmOaY=
-k8s.io/cluster-bootstrap v0.29.0 h1:zCYdZ+LWDj4O86FB5tDKckIEsf2qBHjcp78xtjOzD3A=
-k8s.io/cluster-bootstrap v0.29.0/go.mod h1:PDk+ouXC6bM2FFdo4u53IlWK3ZMWebH4TeE5BGmHWRw=
+k8s.io/cluster-bootstrap v0.30.0 h1:vaIjA1eMFpcLYz+p6NMj75aqiauDahFx9EkuTxc0GMI=
+k8s.io/cluster-bootstrap v0.30.0/go.mod h1:/ceTq+EC/aOrQk27mfmFW/iOeQDqzKg6vYWIBFNHSAE=
 k8s.io/component-base v0.30.0 h1:cj6bp38g0ainlfYtaOQuRELh5KSYjhKxM+io7AUIk4o=
 k8s.io/component-base v0.30.0/go.mod h1:V9x/0ePFNaKeKYA3bOvIbrNoluTSG+fSJKjLdjOoeXQ=
 k8s.io/klog/v2 v2.120.1 h1:QXU6cPEOIslTGvZaXvFWiP9VKyeet3sawzTOvdXb4Vw=
@@ -1097,12 +1099,12 @@ k8s.io/kube-openapi v0.0.0-20240228011516-70dd3763d340 h1:BZqlfIlq5YbRMFko6/PM7F
 k8s.io/kube-openapi v0.0.0-20240228011516-70dd3763d340/go.mod h1:yD4MZYeKMBwQKVht279WycxKyM84kkAx2DPrTXaeb98=
 k8s.io/kubectl v0.29.0 h1:Oqi48gXjikDhrBF67AYuZRTcJV4lg2l42GmvsP7FmYI=
 k8s.io/kubectl v0.29.0/go.mod h1:0jMjGWIcMIQzmUaMgAzhSELv5WtHo2a8pq67DtviAJs=
-k8s.io/kubelet v0.29.0 h1:SX5hlznTBcGIrS1scaf8r8p6m3e475KMifwt9i12iOk=
-k8s.io/kubelet v0.29.0/go.mod h1:kvKS2+Bz2tgDOG1S1q0TH2z1DasNuVF+8p6Aw7xvKkI=
-k8s.io/kubernetes v1.29.4 h1:n4VCbX9cUhxHI+zw+m2iZlzT73/mrEJBHIMeauh9g4U=
-k8s.io/kubernetes v1.29.4/go.mod h1:28sDhcb87LX5z3GWAKYmLrhrifxi4W9bEWua4DRTIvk=
-k8s.io/mount-utils v0.29.0 h1:KcUE0bFHONQC10V3SuLWQ6+l8nmJggw9lKLpDftIshI=
-k8s.io/mount-utils v0.29.0/go.mod h1:N3lDK/G1B8R/IkAt4NhHyqB07OqEr7P763z3TNge94U=
+k8s.io/kubelet v0.30.0 h1:/pqHVR2Rn8ExCpn211wL3pMtqRFpcBcJPl4+1INbIMk=
+k8s.io/kubelet v0.30.0/go.mod h1:WukdKqbQxnj+csn3K8XOKeX7Sh60J/da25IILjvvB5s=
+k8s.io/kubernetes v1.30.0 h1:u3Yw8rNlo2NDSGaDpoxoHXLPQnEu1tfqHATKOJe94HY=
+k8s.io/kubernetes v1.30.0/go.mod h1:yPbIk3MhmhGigX62FLJm+CphNtjxqCvAIFQXup6RKS0=
+k8s.io/mount-utils v0.30.0 h1:EceYTNYVabfpdtIAHC4KgMzoZkm1B8ovZ1J666mYZQI=
+k8s.io/mount-utils v0.30.0/go.mod h1:9sCVmwGLcV1MPvbZ+rToMDnl1QcGozy+jBPd0MsQLIo=
 k8s.io/utils v0.0.0-20240502163921-fe8a2dddb1d0 h1:jgGTlFYnhF1PM1Ax/lAlxUPE+KfCIXHaathvJg1C3ak=
 k8s.io/utils v0.0.0-20240502163921-fe8a2dddb1d0/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 libvirt.org/go/libvirt v1.10003.0 h1:LEoawzuggD6IL5R/XtnBE8wWJx49i7UZ1HcB7p9glwE=

hack/tools/go.mod

@@ -4,10 +4,10 @@ go 1.22
 
 require (
 	github.com/google/go-licenses v1.6.0
-	github.com/google/keep-sorted v0.3.0
-	github.com/katexochen/sh/v3 v3.7.0
-	golang.org/x/tools v0.18.0
-	golang.org/x/vuln v1.0.1
+	github.com/google/keep-sorted v0.4.0
+	github.com/katexochen/sh/v3 v3.8.0
+	golang.org/x/tools v0.21.0
+	golang.org/x/vuln v1.1.0
 )
 
 require (
@@ -15,10 +15,8 @@ require (
 	github.com/Workiva/go-datastructures v1.0.53 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/emirpasic/gods v1.18.1 // indirect
-	github.com/frankban/quicktest v1.14.6 // indirect
 	github.com/go-logr/logr v1.4.1 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
-	github.com/google/go-cmp v0.6.0 // indirect
 	github.com/google/licenseclassifier v0.0.0-20210722185704-3043a050f148 // indirect
 	github.com/google/renameio/v2 v2.0.0 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
@@ -29,7 +27,6 @@ require (
 	github.com/mitchellh/go-homedir v1.1.0 // indirect
 	github.com/otiai10/copy v1.6.0 // indirect
 	github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e // indirect
-	github.com/rogpeppe/go-internal v1.12.0 // indirect
 	github.com/rs/zerolog v1.31.0 // indirect
 	github.com/sergi/go-diff v1.3.1 // indirect
 	github.com/spf13/cobra v1.8.0 // indirect
@@ -38,19 +35,19 @@ require (
 	github.com/stretchr/testify v1.8.4 // indirect
 	github.com/xanzy/ssh-agent v0.3.3 // indirect
 	go.opencensus.io v0.24.0 // indirect
-	golang.org/x/crypto v0.19.0 // indirect
+	golang.org/x/crypto v0.23.0 // indirect
 	golang.org/x/exp v0.0.0-20240213143201-ec583247a57a // indirect
-	golang.org/x/mod v0.15.0 // indirect
-	golang.org/x/net v0.21.0 // indirect
-	golang.org/x/sync v0.6.0 // indirect
-	golang.org/x/sys v0.17.0 // indirect
-	golang.org/x/term v0.17.0 // indirect
-	golang.org/x/text v0.14.0 // indirect
+	golang.org/x/mod v0.17.0 // indirect
+	golang.org/x/net v0.25.0 // indirect
+	golang.org/x/sync v0.7.0 // indirect
+	golang.org/x/sys v0.20.0 // indirect
+	golang.org/x/term v0.20.0 // indirect
+	golang.org/x/text v0.15.0 // indirect
 	google.golang.org/protobuf v1.33.0 // indirect
 	gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c // indirect
 	gopkg.in/src-d/go-billy.v4 v4.3.2 // indirect
 	gopkg.in/src-d/go-git.v4 v4.13.1 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 	k8s.io/klog/v2 v2.120.1 // indirect
-	mvdan.cc/editorconfig v0.2.0 // indirect
+	mvdan.cc/editorconfig v0.2.1-0.20231228180347-1925077f8eb2 // indirect
 )

hack/tools/go.sum

@@ -174,15 +174,14 @@ github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/
 github.com/google/go-cmp v0.5.6/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.7/go.mod h1:n+brtR0CgQNWTVd5ZUFpTBC8YFBDLK/h/bpaJ8/DtOE=
 github.com/google/go-cmp v0.5.8/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
-github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
 github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
 github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
 github.com/google/go-licenses v1.6.0 h1:MM+VCXf0slYkpWO0mECvdYDVCxZXIQNal5wqUIXEZ/A=
 github.com/google/go-licenses v1.6.0/go.mod h1:Z8jgz2isEhdenOqd/00pq7I4y4k1xVVQJv415otjclo=
 github.com/google/go-replayers/httpreplay v1.1.1 h1:H91sIMlt1NZzN7R+/ASswyouLJfW0WLW7fhyUFvDEkY=
 github.com/google/go-replayers/httpreplay v1.1.1/go.mod h1:gN9GeLIs7l6NUoVaSSnv2RiqK1NiwAmD0MrKeC9IIks=
-github.com/google/keep-sorted v0.3.0 h1:nsDd3h16Bf1KFNtfvzGoLaei95AMLswikiw1ICDOKPE=
-github.com/google/keep-sorted v0.3.0/go.mod h1:sWIIDzox6hizdt59dsqD2yH800NXYBwRqylmBDs/QXM=
+github.com/google/keep-sorted v0.4.0 h1:UNJGKBtOg4m4rgTYCpkBh0WBI2UTLm+xNC1lZvfQpp0=
+github.com/google/keep-sorted v0.4.0/go.mod h1:sWIIDzox6hizdt59dsqD2yH800NXYBwRqylmBDs/QXM=
 github.com/google/licenseclassifier v0.0.0-20210722185704-3043a050f148 h1:TJsAqW6zLRMDTyGmc9TPosfn9OyVlHs8Hrn3pY6ONSY=
 github.com/google/licenseclassifier v0.0.0-20210722185704-3043a050f148/go.mod h1:rq9F0RSpNKlrefnf6ZYMHKUnEJBCNzf6AcCXMYBeYvE=
 github.com/google/martian v2.1.0+incompatible h1:/CP5g8u/VJHijgedC/Legn3BAbAaWPgecwXBIDzw5no=
@@ -236,8 +235,8 @@ github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99/go.mod h1:1lJo3i
 github.com/jessevdk/go-flags v1.4.0/go.mod h1:4FA24M0QyGHXBuZZK/XkWh8h0e1EYbRYJSGM75WSRxI=
 github.com/jstemmer/go-junit-report v0.0.0-20190106144839-af01ea7f8024/go.mod h1:6v2b51hI/fHJwM22ozAgKL4VKDeJcHhJFhtBdhmNjmU=
 github.com/jstemmer/go-junit-report v0.9.1/go.mod h1:Brl9GWCQeLvo8nXZwPNNblvFj/XSXhF0NWZEnDohbsk=
-github.com/katexochen/sh/v3 v3.7.0 h1:jrU9BWBgp9o2NcetUVm3dNpQ2SK1zG6aF6WF0wtPajc=
-github.com/katexochen/sh/v3 v3.7.0/go.mod h1:DSfEtJYp0xGV3Ex3oTePemLXE4F6rIj9hJtu2uYoDh0=
+github.com/katexochen/sh/v3 v3.8.0 h1:/BNMhF21b6Q4vcB6YyGtxcGGcdT3NCTiUBNBYcI3EmI=
+github.com/katexochen/sh/v3 v3.8.0/go.mod h1:yDdSo3LMdcNA6H2kjFyud/4RA5oPWc9lHZVO3qyXXEA=
 github.com/kevinburke/ssh_config v0.0.0-20190725054713-01f96b0aa0cd/go.mod h1:CT57kijsi8u/K/BOFA39wgDQJ9CxiF4nAY/ojJ6r6mM=
 github.com/kevinburke/ssh_config v1.2.0 h1:x584FjTGwHzMwvHx18PXxbBVzfnxogHaAReU4gf13a4=
 github.com/kevinburke/ssh_config v1.2.0/go.mod h1:CT57kijsi8u/K/BOFA39wgDQJ9CxiF4nAY/ojJ6r6mM=
@@ -279,7 +278,6 @@ github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZN
 github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/rogpeppe/fastuuid v1.2.0/go.mod h1:jVj6XXZzXRy/MSR5jhDC/2q6DgLz+nrA6LYCDYWNEvQ=
 github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
-github.com/rogpeppe/go-internal v1.9.0/go.mod h1:WtVeX8xhTBvf0smdhujwtBcq4Qrzq/fJaraNFVN+nFs=
 github.com/rogpeppe/go-internal v1.12.0 h1:exVL4IDcn6na9z1rAb56Vxr+CgyK3nn3O+epU5NdKM8=
 github.com/rogpeppe/go-internal v1.12.0/go.mod h1:E+RYuTGaKKdloAfM02xzb0FW3Paa99yedzYV+kq4uf4=
 github.com/rs/xid v1.5.0/go.mod h1:trrq9SKmegXys3aeAKXMUTdJsYXVwGY3RLcfgqegfbg=
@@ -345,8 +343,8 @@ golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPh
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.1.0/go.mod h1:RecgLatLF4+eUMCP1PoPZQb+cVrJcOPbHkTkbkB9sbw=
-golang.org/x/crypto v0.19.0 h1:ENy+Az/9Y1vSrlrvBSyna3PITt4tiZLf7sgCjZBX7Wo=
-golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU=
+golang.org/x/crypto v0.23.0 h1:dIJU/v2J8Mdglj/8rJ6UUOM3Zc9zLZxVZwwxMooUSAI=
+golang.org/x/crypto v0.23.0/go.mod h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v8=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
@@ -386,8 +384,8 @@ golang.org/x/mod v0.4.1/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/mod v0.7.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
-golang.org/x/mod v0.15.0 h1:SernR4v+D55NyBH2QiEQrlBAnj1ECL6AGrA5+dPaMY8=
-golang.org/x/mod v0.15.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
+golang.org/x/mod v0.17.0 h1:zY54UmvipHiNd+pm+m0x9KhZ9hl1/7QNMyxXbc6ICqA=
+golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190108225652-1e06a53dbb7e/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -434,8 +432,8 @@ golang.org/x/net v0.0.0-20220624214902-1bab6f366d9e/go.mod h1:XRhObCWvk6IyKnWLug
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.1.0/go.mod h1:Cx3nUiGt4eDBEyega/BKRp+/AlGL8hYe7U9odMt2Cco=
 golang.org/x/net v0.5.0/go.mod h1:DivGGAXEgPSlEBzxGzZI+ZLohi+xUj054jfeKui00ws=
-golang.org/x/net v0.21.0 h1:AQyQV4dYCvJ7vGmJyKki9+PBdyvhkSd8EIx/qb0AYv4=
-golang.org/x/net v0.21.0/go.mod h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44=
+golang.org/x/net v0.25.0 h1:d/OCCoBEUq33pjydKrGQhw7IlUPI2Oylr+8qLx49kac=
+golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
@@ -472,8 +470,8 @@ golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.0.0-20220601150217-0de741cfad7f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.6.0 h1:5BMeUDZ7vkXGfEr1x9B4bRcTH4lpkTkpdh0T/J+qjbQ=
-golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+golang.org/x/sync v0.7.0 h1:YsImfSBoP9QPYL0xyKJPq0gcaJdG3rInoqxTWbfQu9M=
+golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190221075227-b4e8571b14e0/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
@@ -544,14 +542,14 @@ golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.4.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.17.0 h1:25cE3gD+tdBA7lp7QfhuV+rJiE9YXTcS3VG1SqssI/Y=
-golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.20.0 h1:Od9JTbYCk261bKm4M/mw7AklTlFYIa0bIp9BgSm1S8Y=
+golang.org/x/sys v0.20.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.4.0/go.mod h1:9P2UbLfCdcvo3p/nzKvsmas4TnlujnuoV9hGgYzW1lQ=
-golang.org/x/term v0.17.0 h1:mkTF7LCd6WGJNL3K1Ad7kwxNfYAW6a8a8QqtMblp/4U=
-golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
+golang.org/x/term v0.20.0 h1:VnkxpohqXaOBYJtBmEppKUG6mXpi+4O6purfc2+sMhw=
+golang.org/x/term v0.20.0/go.mod h1:8UkIAJTvZgivsXaD6/pH6U9ecQzZ45awqEOzuCvwpFY=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
@@ -563,8 +561,8 @@ golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
 golang.org/x/text v0.6.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ=
-golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
+golang.org/x/text v0.15.0 h1:h1V/4gjBv8v9cjcR6+AR5+/cIYK5N/WAgiv4xlsEtAk=
+golang.org/x/text v0.15.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
@@ -623,10 +621,10 @@ golang.org/x/tools v0.1.4/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.5/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
 golang.org/x/tools v0.5.0/go.mod h1:N+Kgy78s5I24c24dU8OfWNEotWjutIs8SnJvn5IDq+k=
-golang.org/x/tools v0.18.0 h1:k8NLag8AGHnn+PHbl7g43CtqZAwG60vZkLqgyZgIHgQ=
-golang.org/x/tools v0.18.0/go.mod h1:GL7B4CwcLLeo59yx/9UWWuNOW1n3VZ4f5axWfML7Lcg=
-golang.org/x/vuln v1.0.1 h1:KUas02EjQK5LTuIx1OylBQdKKZ9jeugs+HiqO5HormU=
-golang.org/x/vuln v1.0.1/go.mod h1:bb2hMwln/tqxg32BNY4CcxHWtHXuYa3SbIBmtsyjxtM=
+golang.org/x/tools v0.21.0 h1:qc0xYgIbsSDt9EyWz05J5wfa7LOVW0YTLOXrqdLAWIw=
+golang.org/x/tools v0.21.0/go.mod h1:aiJjzUbINMkxbQROHiO6hDPo2LHcIPhhQsa9DLh0yGk=
+golang.org/x/vuln v1.1.0 h1:ECEdI+aEtjpF90eqEcDL5Q11DWSZAw5PJQWlp0+gWqc=
+golang.org/x/vuln v1.1.0/go.mod h1:HT/Ar8fE34tbxWG2s7PYjVl+iIE4Er36/940Z+K540Y=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
@@ -847,8 +845,8 @@ honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9
 k8s.io/klog/v2 v2.80.1/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0=
 k8s.io/klog/v2 v2.120.1 h1:QXU6cPEOIslTGvZaXvFWiP9VKyeet3sawzTOvdXb4Vw=
 k8s.io/klog/v2 v2.120.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
-mvdan.cc/editorconfig v0.2.0 h1:XL+7ys6ls/RKrkUNFQvEwIvNHh+JKx8Mj1pUV5wQxQE=
-mvdan.cc/editorconfig v0.2.0/go.mod h1:lvnnD3BNdBYkhq+B4uBuFFKatfp02eB6HixDvEz91C0=
+mvdan.cc/editorconfig v0.2.1-0.20231228180347-1925077f8eb2 h1:8nmqQGVnHUtHuT+yvuA49lQK0y5il5IOr2PtCBkDI2M=
+mvdan.cc/editorconfig v0.2.1-0.20231228180347-1925077f8eb2/go.mod h1:r8RiQJRtzrPrZdcdEs5VCMqvRxAzYDUu9a4S9z7fKh8=
 rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8=
 rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0=
 rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA=

image/README.md

@@ -16,113 +16,28 @@ bazel query //image/system/...
 You can either build a group of images (all images for a cloud provider, a stream, ...) or a single image by selecting a target.
 
 ```sh
-bazel build //image/system:openstack_qemu-vtpm_debug
+bazel build //image/system:azure_azure-sev-snp_stable
 ```
 
 The location of the destination folder can be queried like this:
 
 ```sh
-bazel cquery --output=files //image/system:openstack_qemu-vtpm_debug
+bazel cquery --output=files //image/system:azure_azure-sev-snp_stable
 ```
 
-## Upload to CSP
+## Build and Upload
 
-Warning! Never set `--version` to a value that is already used for a release image.
-
-<details>
-<summary>AWS</summary>
-
-- Install `aws` cli (see [here](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html))
-- Login to AWS (see [here](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-quickstart.html))
-- Choose secure boot PKI public keys (one of `pki_dev`, `pki_test`, `pki_prod`)
-  - `pki_dev` can be used for local image builds
-  - `pki_test` is used by the CI for non-release images
-  - `pki_prod` is used for release images
+Similarly, you can also build and upload images to the respective CSP within a single step with the `upload_*` targets.
 
 ```sh
-# Warning! Never set `--version` to a value that is already used for a release image.
-# Instead, use a `ref` that corresponds to your branch name.
-bazel run //image/upload -- image aws --verbose --raw-image path/to/constellation.raw --attestation-variant ""  --version ref/foo/stream/nightly/v2.7.0-pre-asdf
+bazel run //image/system:upload_aws_aws-sev-snp_console -- --ref deps-image-fedora-40 --upload-measurements
 ```
 
-</details>
+The `--ref` should be the branch you're building images on. It should **not contain slashes**. Slashes should be replaced with dashes to
+not break the filesystem structure of the image storages.
 
-<details>
-<summary>GCP</summary>
-
-- Install `gcloud` and `gsutil` (see [here](https://cloud.google.com/sdk/docs/install))
-- Login to GCP (see [here](https://cloud.google.com/sdk/docs/authorizing))
-- Choose secure boot PKI public keys (one of `pki_dev`, `pki_test`, `pki_prod`)
-  - `pki_dev` can be used for local image builds
-  - `pki_test` is used by the CI for non-release images
-  - `pki_prod` is used for release images
-
-```sh
-export GCP_RAW_IMAGE_PATH=$(realpath path/to/constellation.raw)
-export GCP_IMAGE_PATH=path/to/image.tar.gz
-upload/pack.sh gcp ${GCP_RAW_IMAGE_PATH} ${GCP_IMAGE_PATH}
-# Warning! Never set `--version` to a value that is already used for a release image.
-# Instead, use a `ref` that corresponds to your branch name.
-bazel run //image/upload -- image gcp --verbose --raw-image "${GCP_IMAGE_PATH}" --attestation-variant "sev-es"  --version ref/foo/stream/nightly/v2.7.0-pre-asdf
-```
-
-</details>
-
-<details>
-<summary>Azure</summary>
-
-Note:
-
-> For testing purposes, it is a lot simpler to disable Secure Boot for the uploaded image!
-> Disabling Secure Boot allows you to skip the VMGS creation steps above.
-
-- Install `az` and `azcopy` (see [here](https://docs.microsoft.com/en-us/cli/azure/install-azure-cli))
-- Login to Azure (see [here](https://docs.microsoft.com/en-us/cli/azure/authenticate-azure-cli))
-- Optional (if Secure Boot should be enabled) [Prepare virtual machine guest state (VMGS) with customized NVRAM or use existing VMGS blob](#azure-secure-boot)
-
-```sh
-export AZURE_RAW_IMAGE_PATH=path/to/constellation.raw
-export AZURE_IMAGE_PATH=path/to/image.vhd
-upload/pack.sh azure "${AZURE_RAW_IMAGE_PATH}" "${AZURE_IMAGE_PATH}"
-# Warning! Never set `--version` to a value that is already used for a release image.
-# Instead, use a `ref` that corresponds to your branch name.
-bazel run //image/upload -- image azure --verbose --raw-image "${AZURE_IMAGE_PATH}" --attestation-variant "cvm"  --version ref/foo/stream/nightly/v2.7.0-pre-asdf
-```
-
-</details>
-
-<details>
-<summary>OpenStack</summary>
-
-Note:
-
-> OpenStack is not one a global cloud provider, but rather a software that can be installed on-premises.
-> This means we do not upload the image to a cloud provider, but to our CDN.
-
-- Install `aws` cli (see [here](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html))
-- Login to AWS (see [here](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-quickstart.html))
-
-```sh
-# Warning! Never set `--version` to a value that is already used for a release image.
-# Instead, use a `ref` that corresponds to your branch name.
-bazel run //image/upload -- image openstack --verbose --raw-image path/to/constellation.raw --attestation-variant "sev"  --version ref/foo/stream/nightly/v2.7.0-pre-asdf
-```
-
-</details>
-
-<details>
-<summary>QEMU</summary>
-
-- Install `aws` cli (see [here](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html))
-- Login to AWS (see [here](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-quickstart.html))
-
-```sh
-# Warning! Never set `--version` to a value that is already used for a release image.
-# Instead, use a `ref` that corresponds to your branch name.
-bazel run //image/upload -- image qemu --verbose --raw-image path/to/constellation.raw --attestation-variant "default"  --version ref/foo/stream/nightly/v2.7.0-pre-asdf
-```
-
-</details>
+Optionally, the `--upload-measurements` option can be used to specify that measurements for the image should be uploaded, and `--fake-sign` specifies
+that a debugging signing key should be used to sign the measurements, which is done for debug images.
 
 ## Kernel
 
@@ -131,3 +46,14 @@ We track the latest longterm release, use sources directly from [kernel.org](htt
 srpm spec file.
 
 After building a Kernel rpm, we upload it to our CDN and use it in our image builds.
+
+## Upgrading to a new Fedora release
+
+- Search for the old Fedora releasever in the `image/` directory and replace every occurence (outside of lockfiles) with the new releasever
+- Search for Fedora container images in Dockerfiles and upgrade the releasever
+- Regenerate the package lockfile: `bazel run //image/mirror:update_packages`
+- Build test images locally:
+  - `bazel query //image/system:all` (pick an image name from the output)
+  - `bazel build //image/system:IMAGE_NAME_HERE` (replace with an actual image name)
+- Let CI build new images and run e2e tests
+- Upgrade kernel spec under [edgelesssys/constellation-kernel](https://github.com/edgelesssys/constellation-kernel) to use new releasever

image/base/mkosi.conf

@@ -1,6 +1,6 @@
 [Distribution]
 Distribution=fedora
-Release=38
+Release=40
 
 [Output]
 Format=tar

image/initrd/mkosi.conf

@@ -1,6 +1,6 @@
 [Distribution]
 Distribution=fedora
-Release=38
+Release=40
 
 [Output]
 Format=cpio

image/measured-boot/extract/extract.go

@@ -90,9 +90,8 @@ var ukiSections = []string{
 	".initrd",
 	".splash",
 	".dtb",
-	// uanme and sbat will be added in systemd-stub >= 254
-	// ".uname",
-	// ".sbat",
+	".uname",
+	".sbat",
 	".pcrsig",
 	".pcrkey",
 }

image/measured-boot/extract/extract_test.go

@@ -114,6 +114,26 @@ func TestPeFileSectionDigests(t *testing.T) {
 			},
 			Measure: true, MeasureOrder: 5,
 		},
+		{
+			Name: ".uname", Size: 0x22,
+			Digest: [32]uint8{
+				0x32, 0xd5, 0x9d, 0x99, 0x0e, 0x9c, 0x1f, 0x7d,
+				0xa5, 0x54, 0xcb, 0x88, 0x8e, 0x32, 0x38, 0xac,
+				0x61, 0x93, 0xe5, 0xe7, 0x23, 0x0f, 0x99, 0xb1,
+				0x97, 0x13, 0x8d, 0xd7, 0x23, 0xc0, 0xeb, 0xb6,
+			},
+			Measure: true, MeasureOrder: 6,
+		},
+		{
+			Name: ".sbat", Size: 0x10,
+			Digest: [32]uint8{
+				0x66, 0x30, 0xfb, 0x7d, 0x5b, 0xaf, 0x9d, 0x6c,
+				0xd5, 0x1c, 0x9a, 0xc9, 0x54, 0x10, 0xe6, 0x8a,
+				0xa3, 0xfe, 0xdb, 0x4a, 0xdd, 0xd4, 0x2b, 0x34,
+				0x0e, 0x47, 0x11, 0xe2, 0x3c, 0xcc, 0xd4, 0xb2,
+			},
+			Measure: true, MeasureOrder: 7,
+		},
 		{
 			Name: ".pcrkey",
 			Size: 0x12,
@@ -123,7 +143,7 @@ func TestPeFileSectionDigests(t *testing.T) {
 				0x69, 0xd0, 0x86, 0xa6, 0xd6, 0x7d, 0x5f, 0xee,
 				0x88, 0xdb, 0x21, 0x90, 0xc4, 0xa7, 0x07, 0x26,
 			},
-			Measure: true, MeasureOrder: 7,
+			Measure: true, MeasureOrder: 9,
 		},
 		{
 			Name: ".data",
@@ -181,16 +201,6 @@ func TestPeFileSectionDigests(t *testing.T) {
 			},
 			Measure: false, MeasureOrder: -1,
 		},
-		{
-			Name: ".sbat", Size: 0x10,
-			Digest: [32]uint8{
-				0x66, 0x30, 0xfb, 0x7d, 0x5b, 0xaf, 0x9d, 0x6c,
-				0xd5, 0x1c, 0x9a, 0xc9, 0x54, 0x10, 0xe6, 0x8a,
-				0xa3, 0xfe, 0xdb, 0x4a, 0xdd, 0xd4, 0x2b, 0x34,
-				0x0e, 0x47, 0x11, 0xe2, 0x3c, 0xcc, 0xd4, 0xb2,
-			},
-			Measure: false, MeasureOrder: -1,
-		},
 		{
 			Name: ".sdmagic", Size: 0x2d,
 			Digest: [32]uint8{
@@ -211,16 +221,6 @@ func TestPeFileSectionDigests(t *testing.T) {
 			},
 			Measure: false, MeasureOrder: -1,
 		},
-		{
-			Name: ".uname", Size: 0x22,
-			Digest: [32]uint8{
-				0x32, 0xd5, 0x9d, 0x99, 0x0e, 0x9c, 0x1f, 0x7d,
-				0xa5, 0x54, 0xcb, 0x88, 0x8e, 0x32, 0x38, 0xac,
-				0x61, 0x93, 0xe5, 0xe7, 0x23, 0x0f, 0x99, 0xb1,
-				0x97, 0x13, 0x8d, 0xd7, 0x23, 0xc0, 0xeb, 0xb6,
-			},
-			Measure: false, MeasureOrder: -1,
-		},
 		{
 			Name: ".pcrsig", Size: 0x216,
 			Digest: [32]uint8{
@@ -229,7 +229,7 @@ func TestPeFileSectionDigests(t *testing.T) {
 				0xb8, 0x13, 0xb5, 0x31, 0xb0, 0x56, 0x3e, 0x91,
 				0x20, 0x55, 0x6c, 0xf7, 0x25, 0x01, 0xa3, 0x26,
 			},
-			Measure: false, MeasureOrder: 6,
+			Measure: false, MeasureOrder: 8,
 		},
 	}, sectionDigests)
 

image/mirror/SHA256SUMS

@@ -1,354 +1,356 @@
-49750ebd8f565bdb9c94250faa419863d533e826661f19bdbeab40d14461a80c  WALinuxAgent-udev-2.9.0.4-1.fc38.noarch.rpm
-3abc25be1ac0f25e823b1202cc496dcb643c1a623f49e2268993d2a5ed2d7597  aardvark-dns-1.10.0-1.fc38.x86_64.rpm
-8a1b07de91587e5290ec0be9206741ca3bde0d1fdb9459e89900d3ad5aeed068  alternatives-1.26-1.fc38.x86_64.rpm
-858f6ff773a94528451050c17beb16e3bb427ebfab9e1488e99671ff404c5c63  audit-libs-3.1.2-8.fc38.i686.rpm
-19416b019f048f97266f7146f7c626a99ba62dc4e9c920c2d08c520d07f28af7  audit-libs-3.1.2-8.fc38.x86_64.rpm
-17f200a45179c59193ab7c72a4641b502ab5c524f0e5a0d59fd95aa6f15bffc8  authselect-1.4.3-1.fc38.x86_64.rpm
-d2f324c915eb5e14542a55636c8e49c1cd75b17db1a8c7b11693a989629a250b  authselect-libs-1.4.3-1.fc38.x86_64.rpm
-718d95c40b41c2f0ecc8dc2290ebb91b529ba3be7accbad9c30c88e9ce408349  basesystem-11-15.fc38.noarch.rpm
-64d2f098c9196f27e22d96270a79e42b547f4b3c24add0b2e8d3829a2f20556f  bash-5.2.26-1.fc38.x86_64.rpm
-0551362b7c7efc44188147b482179f477240cb8146129d68e9f8a584af0cee68  bzip2-libs-1.0.8-13.fc38.i686.rpm
-95273426afa05a81e6cf77f941e1156f6a0a3305a7768a02c04a4164280cf876  bzip2-libs-1.0.8-13.fc38.x86_64.rpm
-43df24cf3974e8f8b5472a0389d519282ee55c7a720460351d0c75c4866ccf19  ca-certificates-2023.2.60_v7.0.306-1.0.fc38.noarch.rpm
-152f433af3f709a3f5060505f5b3b009e3da8ea455d6d1dab5c3ed2173f9e016  catatonit-0.1.7-14.fc38.x86_64.rpm
-44072ab6f6cf0403fcce8f24dfa6442f958879b31c0b6dadcab635a14f07746a  conmon-2.1.10-1.fc38.x86_64.rpm
-17dfa6a009e8e80119911c2fbde44b43425f2bfe9abf677f68657f0d96603d2a  conntrack-tools-1.4.7-1.fc38.x86_64.rpm
-fd464f86ed49c1bc0ac163cca7508c5aaae640695ff963e7cb67b0d587379260  container-selinux-2.230.0-1.fc38.noarch.rpm
-d9fb9be5604e68ea59a87c14c09f89cdbaddba7ec5761ecded9211ad976db910  containerd-1.6.19-1.fc38.x86_64.rpm
-db4691e52e7d8b9614445428ef8f43a91b0d7069ffd07000c606e7d562df9804  containernetworking-plugins-1.3.0-2.fc38.x86_64.rpm
-cd9583500892b5f50f51167f5c4b16855e15808a79e5137e0c6674e19f305930  containers-common-1-89.fc38.noarch.rpm
-66f5951f5ae9c8ec9cddf1ff87b0c8aea29298c763712bfec0ed507f57b6d3e6  containers-common-extra-1-89.fc38.noarch.rpm
-1100feca307bb7159a00f336fa5303fd52ded761fc25c77fdc5f095e2add29b3  coreutils-single-9.1-12.fc38.x86_64.rpm
-75ecf8c60bea53432b973d9391e3bdb1b6cdc1f1cad0a7b56aabfb8b70252832  cpio-2.13-14.fc38.x86_64.rpm
-65ed3fa87ea138a51a5280848aac565e996c3217fa9cd9eafa8a4a2c05f7b37d  cracklib-2.9.11-1.fc38.i686.rpm
-9e13cb10c94f5de3573a2cacd153050d6dad05fe13c50c8fa69406e8f881d3d9  cracklib-2.9.11-1.fc38.x86_64.rpm
-c09679c55fdeef598c6cd9118e8a2141da369dcf27ed9e9ede8e42ffc44743f2  cracklib-dicts-2.9.11-1.fc38.x86_64.rpm
-3c6985fe1a0388482131411b5a0811658411056ac7b96687225bf77143645ca4  criu-3.18-1.fc38.x86_64.rpm
-979323d3e3e891195ebb48edbf1e741f14937ecd3e3639f8c86eabdce0c30b94  criu-libs-3.18-1.fc38.x86_64.rpm
-c1a38c1ab271b6f4e95e9a7e186c817431dc8eb96a84a73faae3887710814dae  crun-1.14.4-1.fc38.x86_64.rpm
-6809fe060dc93dfed723bd8faca0f5d65e4f6c62aebd2f9f39f679413b260539  crypto-policies-20230301-1.gita12f7b2.fc38.noarch.rpm
-d1880b8f3e8a5fa943ba033c96dc964fac3e07c34cbd0bb8ac2b0fdcb57abcbc  crypto-policies-scripts-20230301-1.gita12f7b2.fc38.noarch.rpm
-418287cd51f9ae9e5b74a18112a062a49ee51d22656dea86d08daba311c93e44  cryptsetup-2.6.1-1.fc38.x86_64.rpm
-364cfba8a49773110ea200a533037afd99307b80a28333fc5f900f528a66333e  cryptsetup-libs-2.6.1-1.fc38.i686.rpm
-070d86aca4548e9148901881a4ef64d98c5dfd4ea158e9208c650c7f4b225c47  cryptsetup-libs-2.6.1-1.fc38.x86_64.rpm
-a3b7a637d95dc33ef2f7fc457516e4cb1b98ab0c80bcdf304a38ed83aeac1c59  curl-8.0.1-7.fc38.x86_64.rpm
-c2fe2e57ca35681e6c1ee43b7a5cbb24fd0a9470b77b1286ede35703e5b2295c  curl-minimal-8.0.1-7.fc38.x86_64.rpm
-b570b4857289cf32ed57d0d84cb861677a649cef7c5cc2498a249d6593eb3614  cyrus-sasl-lib-2.1.28-9.fc38.x86_64.rpm
-faa01592782cad3faec0c0a07a3fa17bd0a793dc906fcb7ffedb975f1d077be4  dbus-1.14.10-1.fc38.x86_64.rpm
-6652f5d40acfaeda20555bdd63e964f123e8ab4a52f8c8890e749e06b6bae3e0  dbus-broker-33-1.fc38.x86_64.rpm
-a97ebbbaf97348a0bcf967eb8c3c822fc30154cf9679f5a1cb21f7c507077bbd  dbus-common-1.14.10-1.fc38.noarch.rpm
-66d83dc8eb183afdd674113c82334dd59c67085bff294057533c9d86260064c7  device-mapper-1.02.197-1.fc38.x86_64.rpm
-713ad6733908fd52de3cef5d613d08309caa663fe53f972f47c39318ce3edf3e  device-mapper-libs-1.02.197-1.fc38.i686.rpm
-518af206ca813e823d01ac0819ca29b5804446b24f5765037ff69d809a93cd49  device-mapper-libs-1.02.197-1.fc38.x86_64.rpm
-f20b884c9452d4cf839707d4ff38191d34dd2035c87f832c697f6f328fa1b36b  diffutils-3.10-1.fc38.x86_64.rpm
-9b82b697e3f3f7cb1c6c411a142b09fe71562e7ac34778b1f1c5e6b4d232a8cc  dracut-059-5.fc38.x86_64.rpm
-8bcdb9b5ce9b5e19c4f772f52c2c40712491d2a953496e415c380a21a792b050  duktape-2.7.0-2.fc38.x86_64.rpm
-b25a042f52c8cdc1ddab56fc726d98789ff902d5264d9835f5b910db3e565213  e2fsprogs-1.46.5-4.fc38.x86_64.rpm
-1ca049bff926a8ec9b6e0e69f23662934eab96c35d8eda1cf429a2a31f186045  e2fsprogs-libs-1.46.5-4.fc38.x86_64.rpm
+a1d1bd1e3dd3f133c984039219a05703cb38b073daf8a864bd95805747633103  aardvark-dns-1.10.0-1.fc40.x86_64.rpm
+7e635d208b2d3191973fbce9b2ee0a470204fa121270d9aa297ed5c3546f520b  alternatives-1.26-3.fc40.x86_64.rpm
+a8aac6e068011d76e89536ffcb29e516c3ccd0095ef8ada0a37a9fd21a2b39b0  audit-libs-4.0.1-1.fc40.i686.rpm
+5b6386ac345c3fd388c509df4ad31ffe04f1a1ed6eb4f10d2b5f56c2a5b300dc  audit-libs-4.0.1-1.fc40.x86_64.rpm
+0fe4ed8770711ede2fcec43c4545b62461a24f03b3aa836d0e7071f4436e26f1  authselect-1.5.0-5.fc40.x86_64.rpm
+db7d946583f2a91a3301d964a5adc7afb1620e0f72c9a9033ae3a4cfc2f332ad  authselect-libs-1.5.0-5.fc40.x86_64.rpm
+6404b1028262aeaf3e083f08959969abea1301f7f5e8610492cf900b3d13d5db  basesystem-11-20.fc40.noarch.rpm
+156e073308cb28a5a699d6ffafc71cbd28487628fd05471e1978e4b9a5c7a802  bash-5.2.26-3.fc40.x86_64.rpm
+208ddebcd5edbff3dca54020a8a180f5410ea9b2d82c733e106992a729b4b84e  bzip2-libs-1.0.8-18.fc40.i686.rpm
+68a43532d10187888788625d0b6c2224ba95804280eddf2636e5ef700607e7d0  bzip2-libs-1.0.8-18.fc40.x86_64.rpm
+e61d6858790314f9d9ab539c5531d2b67ce763c9e5ac6c22dd76293fec12f3f5  ca-certificates-2023.2.62_v7.0.401-6.fc40.noarch.rpm
+99d4976979c8b9d18c9d2d686de77882dc6a4e72ebfe358fb9a37a83f0ecdc90  catatonit-0.1.7-22.fc40.x86_64.rpm
+ef93475ea699c80bb8e49b5a80fefeed23e553b0e492d74748a55958b4dde568  conmon-2.1.10-1.fc40.x86_64.rpm
+adf4b75cdd9fae9d2d37fb71d9f0bf625a6705c0f0a7784569ab21463fe22152  conntrack-tools-1.4.7-7.fc40.x86_64.rpm
+bbe29e0c7b4ca076d50b4ac3954eb383459230d96b13f353ee71ebd5de33b6d1  containerd-1.6.23-5.fc40.x86_64.rpm
+25fffa3b5f1b0b2349fd6f8f6ccb6e84936c50eeb8d4a292bcc2b74895fa7fcc  containernetworking-plugins-1.4.0-4.fc40.x86_64.rpm
+542e8c11b3af4c4bbbe2e8911c9f9dac12620d20be15011561cb3791165562c5  containers-common-0.58.0-2.fc40.noarch.rpm
+483e8966b8f25fd5508ebe01a8b4fed75fd4c5105ba5d71284322ac3d3500b7b  containers-common-extra-0.58.0-2.fc40.noarch.rpm
+4af8d4cf81c8c368c2a128dcd2b1ffe228589568b162e2d482bd0e2b8d2ca0da  container-selinux-2.230.0-1.fc40.noarch.rpm
+d90e0c786e9406ac4f4db67a8d4bbf3d7bf724797dbf1dd422ff376eaa214b3e  coreutils-single-9.4-6.fc40.x86_64.rpm
+d941a78ffb6e2e0b4c24d0097d0351ced8796edde90208b4bddee459bce0a949  cpio-2.15-1.fc40.x86_64.rpm
+faa23cb6a7a612c0a6e874c788c5add967c5e193bd38c2e6093b82b38a162f81  cracklib-2.9.11-5.fc40.i686.rpm
+ea1f43ef9a4b02a9c66726ee386f090145696fb93dff80d593ac82126f8037ec  cracklib-2.9.11-5.fc40.x86_64.rpm
+fe24641e69545c428890a4b094f015c03f65a6c30c3db7bb0de7672bab66bfd6  cracklib-dicts-2.9.11-5.fc40.x86_64.rpm
+e4407cbfeb01494457e941a56971ec3aefbd35206792918d60fc9417acacd1a8  criu-3.19-4.fc40.x86_64.rpm
+6dd4fe61a462d20fd6fc07ecf8bf47198cc24733d82fe0e46ed4d5f988dffef4  criu-libs-3.19-4.fc40.x86_64.rpm
+8a86435bf7382475bc7366b5dbf741e549c23b16c3430fecf9b84f3a1e6c9e88  crun-1.14.4-1.fc40.x86_64.rpm
+11d4b45c1001ccd523e0e95cc4b8f84bd332d2df42d08fcfa451288bcd074142  crypto-policies-20240201-2.git9f501f3.fc40.noarch.rpm
+126f9f1aa7312ff6841b44bd8f5cdec46998d8a73f978aa50144f6fb492a1658  crypto-policies-scripts-20240201-2.git9f501f3.fc40.noarch.rpm
+d54dd64d6e5ec06ce51dd063cde948f71e8c0c930058e3232c963a7b7309947b  cryptsetup-2.7.2-1.fc40.x86_64.rpm
+ea1a32f78c86ea741d31d7166e641602e62a0797a2200725385e148b15977388  cryptsetup-libs-2.7.2-1.fc40.i686.rpm
+41fdb51944e94625a8d4424c784482c426ca5ec7ca63f36b0f7231e7f8ccde13  cryptsetup-libs-2.7.2-1.fc40.x86_64.rpm
+eb071367cc23b314bfc3f3d7d9611bd6d19fc17cebae4f790e4d6719545f283a  curl-8.6.0-8.fc40.x86_64.rpm
+0dff67dfeca59cb68cadafe8d9909b88dfaa2fc0a9a4426352f66a5fe351fbe3  cyrus-sasl-lib-2.1.28-19.fc40.x86_64.rpm
+19197df26f76af5e78bd1e3ad2f777bea071eef6dfec1219f6b8ee3c80e10193  dbus-1.14.10-3.fc40.x86_64.rpm
+84ca6055aa354df549fdc78d6d9df692ed4d12c14a489a6d2ce844b5f225a502  dbus-broker-36-2.fc40.x86_64.rpm
+81bade4072aca4f5d22be29a916d9d0cfc9262a6c5d92ddfe750f7b8bf03f7c9  dbus-common-1.14.10-3.fc40.noarch.rpm
+51bcbc8f98a8abea9a24f3f3988958b965dfe8d6b4201ee046255416fe3ce75c  dbus-libs-1.14.10-3.fc40.x86_64.rpm
+d4fb93847a0e94d3bdbea203c1df0895e254089d825dfaf040b1aae3ae9547ff  device-mapper-1.02.197-1.fc40.x86_64.rpm
+89cd53411d71097aeb5af16cf6d7fcb2c11103a5606a78e628fb1a138b0f0780  device-mapper-libs-1.02.197-1.fc40.i686.rpm
+c736bdca85feb3982cc8772058e95c7794d37503d5a26a2f84d4092bd5300d18  device-mapper-libs-1.02.197-1.fc40.x86_64.rpm
+6913a547250df04ec388b96b7512977a25ab2fca62ed4345c3a9fc8782ce659f  diffutils-3.10-5.fc40.x86_64.rpm
+4e9636e8733ea13c399c1a37453bc087b6c515c624991d848db0621a91dcaec8  dracut-060-1.fc40.x86_64.rpm
+fa40cda554dc644d5a8354b18be748f21996dadd6193ee4ac32c02581266d313  duktape-2.7.0-7.fc40.x86_64.rpm
+ac4f1b2eaf5d452512e7b6172c93880c2b501946b71a228adc02d50bb3fb56e0  e2fsprogs-1.47.0-5.fc40.x86_64.rpm
+8476fda117e3cb808129ddc2f975069685a8c7875ee04c3dafa6ceed948a2628  e2fsprogs-libs-1.47.0-5.fc40.x86_64.rpm
 3e0ec4d7b4b95d10f58c5269688e03da7abb4d73169c76761f4fc7e7f7797a47  ec2-utils-1.2-47.amzn2.noarch.rpm
-5b5195bb6dacdd7c78522675ce83784e2befd1bdbadb14c609d9e1488754ca79  efitools-1.9.2-9.fc38.x86_64.rpm
-ad7eb0fc4f0c561dd25324219c74eb6fdfb41e58ec3c419c1f17ea841469021e  efivar-libs-39-1.fc38.x86_64.rpm
-f2f532b450036d5d887ac8e97b2794d5a1f7559bd07474c4ae3ea8a99e62c0cb  elfutils-debuginfod-client-0.191-1.fc38.i686.rpm
-908f00f10fb3fbc2497e198258208e623b2f1f050f0608f3fea7d484f05669e3  elfutils-debuginfod-client-0.191-1.fc38.x86_64.rpm
-72a4ddea9b2888d833abea2ec9ad8fa11184d131dfdccf4aa67041c32f824905  elfutils-default-yama-scope-0.191-1.fc38.noarch.rpm
-7e55a4aa54116364d962106f11f6b4c4dddd2720e7a4edd30c6bf1a1eaa1167f  elfutils-libelf-0.191-1.fc38.i686.rpm
-0a8f16af4bb2ebc0e38bb5cfcdd7d97ba683fe3188d26fe730e1e0f2def00571  elfutils-libelf-0.191-1.fc38.x86_64.rpm
-5691c73938ffee4ba42234e8b6b493ea2510747d5a9f9df13b38814a3a6ce2cb  elfutils-libs-0.191-1.fc38.i686.rpm
-95cd3fe0080db7f3d16ae3e4ac2675d264236557e54e63c93034a29c34aac8f7  elfutils-libs-0.191-1.fc38.x86_64.rpm
-869676690a68d3741c7cff1bffcab632ed2b05e78a2b8983cf09fad88f16eb14  ethtool-6.7-1.fc38.x86_64.rpm
-4925dabd5b56209fe7c5536f12239c9cdba33ff7aae477d8001c245ed8c2e2ca  expat-2.6.0-1.fc38.x86_64.rpm
-7f7c78f598f7ff131bbe77913b9fc6b7b49d1fce30f2d8505b2d8a85458f519a  fedora-gpg-keys-38-1.noarch.rpm
-40f7d64e38ae31dcb3e7273c7e089705e816dc131ae87c176e2c1aad02d5b510  fedora-release-38-36.noarch.rpm
-ac9ede79357b33f0d0c9087333b0dd3e3fd1cf5ccab5c36310b0ec446390e0c7  fedora-release-common-38-36.noarch.rpm
-bacf386d747343cb10a2c3847c426d3e044b7de1742b4918e3b1b78cc1b54bc4  fedora-release-identity-basic-38-36.noarch.rpm
-916b75b58e9a2afe5d53cb73fdabea4d0cd8b1eba9f1213754384d0ccd531e57  fedora-repos-38-1.noarch.rpm
-196b3612e50069c68d67ffaf3081d25923e2b4ca7e1bad8f124515b3fa472d4a  file-5.44-3.fc38.x86_64.rpm
-83bb8576a018ae028ff1434c32e1f3dfab66a781e1af9057862a2d7f3d725f58  file-libs-5.44-3.fc38.x86_64.rpm
-b0fc6c55f5989aebf6e71279541206070b32b3b28b708a249bd3bdeaa6c088a4  filesystem-3.18-3.fc38.x86_64.rpm
-79986f917ef1bae7ca2378b16515ba44c19160f5a5eae4f6b697eda160bc26c1  findutils-4.9.0-3.fc38.x86_64.rpm
-d5ae6a7d99826a17d163d9846c2705442b5792a7ccacc5169e4986cdf4b6bae2  fuse-common-3.14.1-1.fc38.x86_64.rpm
-56df47937646df892dad25c6b9ae63d111328febfe86eb93096b8b0a11700b60  fuse-libs-2.9.9-16.fc38.x86_64.rpm
-088ebe20ac0854c1f216883aa1f6ed8dfc7844807455f4acfef05b7a4b8509db  fuse-overlayfs-1.13-1.fc38.x86_64.rpm
-55ca555fe815bd360b08500889b652f50fe4c56dfafbed0cc459f2362641f1a0  fuse3-3.14.1-1.fc38.x86_64.rpm
-f54340fec047cc359a6a164a1ce88d0d7ffcd8f7d6334b50dc5b3d234e3a19ac  fuse3-libs-3.14.1-1.fc38.x86_64.rpm
-e607df61803999da46a199d23d4acadb45b290f29b5b644e583c5526d8081178  gawk-5.1.1-5.fc38.x86_64.rpm
-254c6789b4a98b96a53172e1b3fb866f71ea29a5b5fa7b39f072f33c27d897bc  gawk-all-langpacks-5.1.1-5.fc38.x86_64.rpm
-eb376264750aae673aa2a3218c291756023dea980640b30a3efe0f2199ff3889  gdbm-libs-1.23-3.fc38.x86_64.rpm
-276c7af4b13262c0307cf2528c6d79c859ed348db68c0d2780869ea4b179dd02  gettext-envsubst-0.21.1-2.fc38.x86_64.rpm
-4fb6fcf7eef64a48666ff9fe5a46344087979d9e8fd87be4d58a17cf9c3ef108  gettext-libs-0.21.1-2.fc38.x86_64.rpm
-3837cbe450ceb59e1f9e7469aeb6ec98e08150773b83463725acfb2ebb77a98a  gettext-runtime-0.21.1-2.fc38.x86_64.rpm
-99d5c1b62e51a0cbba487122e28fb795ebfcacbba35cccd1260a29b55aff221f  glib2-2.76.6-1.fc38.x86_64.rpm
-b6e984ba57b4fae6843c0dc2bdc58d54cfe02fa7ac864cc6010a52a2592279f6  glibc-2.37-19.fc38.i686.rpm
-7832298a40aa9dc976c4d2730fd5b6703d6c96aeebf49e0d7bcdde7d6e2eeea9  glibc-2.37-19.fc38.x86_64.rpm
-8825b05b3ee51fdd24a3b61a2b8a32bf27c03115be0cfeddfaf5c13373e8a367  glibc-common-2.37-19.fc38.x86_64.rpm
-dc3721950be43a62a04f6e042885c52616c843a7ae912d1d7b9a01bf412207ae  glibc-gconv-extra-2.37-19.fc38.i686.rpm
-09ac0b074270853cd181c59c79a98ad3c3ef7f21cfdffeded97ce7260a4f1112  glibc-gconv-extra-2.37-19.fc38.x86_64.rpm
-bfe2bd437e1dc12eec48a572c884e4f2580fc825712dca8c24b4791a270ae7ec  glibc-minimal-langpack-2.37-19.fc38.x86_64.rpm
-69e48c73d962e3798fbc84150dfd79258b32a4f9250ee801d8cdb9540edfc21a  gmp-6.2.1-4.fc38.x86_64.rpm
-940192d99005896a29de3c682259b3505652778d58ec74a003639f3ba3193a1a  gnupg2-2.4.0-3.fc38.x86_64.rpm
-cd41c94b8c668602f7fb5eae595e5d5c34bd1b91690b5cc06f4c8c199794dfa8  gnupg2-smime-2.4.0-3.fc38.x86_64.rpm
-660cacbbb9c851519837fd5eaff865aef9cc725962007f9c860baa2dbb288171  gnutls-3.8.5-1.fc38.x86_64.rpm
-86475210e5d0994dbc614bdc2ad1bd85d37f1e6c2aeee08f41d803195691ee89  google-compute-engine-guest-configs-udev-20230929.00-1.fc38.noarch.rpm
-e0481a0fd263907193fe9f3f080a17e89de1ef1d8a490078a6225062b4eec761  gpgme-1.17.1-5.fc38.x86_64.rpm
-ad16ec814c4423d007d218a3f45d2e39d3dab00fc8c0d75eef176041594e3970  gpm-libs-1.20.7-42.fc38.x86_64.rpm
-60ed241ec381a23d03fac733a72132dbdc4ba04c412add78bfc67f1b9f1b4daa  grep-3.8-3.fc38.x86_64.rpm
-b550e98ee06b72177009627b7dedf470fe662c5b7180180fed14d705788f33a7  grub2-common-2.06-118.fc38.noarch.rpm
-ad56781d108b910a9f86106cbb653f01201196995150e9e5d84d3de6b90f4851  grub2-tools-2.06-118.fc38.x86_64.rpm
-2e98885b2a2271f1020804ec2a2912f045fc19c87b65177280d94250ad8e21f5  grub2-tools-minimal-2.06-118.fc38.x86_64.rpm
-5e95f1f40c3242809a7a047543a57046d16e5df811aa816c4aa2b0cc8b883b8e  grubby-8.40-70.fc38.x86_64.rpm
-cd17ffd09699224216affbbc765dfda04e1b5ccebb8e95af45a56c54ff257e2b  gvisor-tap-vsock-0.7.3-1.fc38.x86_64.rpm
-8ec6f2f11b854734c53b5d43638d08740b3b36f981c495d0ca17bf044b370248  gvisor-tap-vsock-gvforwarder-0.7.3-1.fc38.x86_64.rpm
-166e842798813a72e4d075dcd9b6e814d7ad3fc8d1b5860281cffe7a68784b25  gzip-1.12-3.fc38.x86_64.rpm
-95c1a55fd14757d33b9c8e2a85dbcda5601bc20c166f983dacbb410849fad4da  iproute-6.4.0-1.fc38.x86_64.rpm
-74e4a1b67ba1772df7bedbb2510a45feb110c58902c805cd105e9693c6875ddd  iproute-tc-6.4.0-1.fc38.x86_64.rpm
-86906f04a9f2e96289ae3dd71e3069af4fd42df7de87d7853c790f50f5baeeb6  iptables-legacy-1.8.9-4.fc38.1.x86_64.rpm
-abcb71db54b690f8100f34f201fba60c21eae13e052f6b221eda7e1ee8bcc04c  iptables-legacy-libs-1.8.9-4.fc38.1.x86_64.rpm
-767c6eccb8dda9f9617d245233822f91c0ed478afc421c1a1ff09584b6484ade  iptables-libs-1.8.9-4.fc38.1.x86_64.rpm
-d5f329b2d0ec7ed50b047701f7c54b37f5ffabc27e57c2fb5462b32bc9b41583  iptables-nft-1.8.9-4.fc38.1.x86_64.rpm
-f74d1e8ba95ff5df02477ba6430d09476e8a1af6e8476453d08d99b276924b25  jansson-2.13.1-6.fc38.x86_64.rpm
-7fa521efbcc6a27d679a2ad6ab7d07a8a742d9de49458d4b4352f528c8c78e1d  json-c-0.17-1.fc38.i686.rpm
-d111f87bed4f918bbd720d509fd97072b345f3a5998910d0a0413104b6fe98c2  json-c-0.17-1.fc38.x86_64.rpm
-8a3a4007d921c6a9b372e4573520866b445c18476f907b023ea19b436436ec33  kbd-2.5.1-5.fc38.x86_64.rpm
-97fcab8f93c5213714e0a9d15e48440c567d2ac39e4ed12743198268082f0583  kbd-legacy-2.5.1-5.fc38.noarch.rpm
-2ea5dfd9d8c8fe7f61022b41fd6f8a2653692acf30253f45e1dc67def1648f32  kbd-misc-2.5.1-5.fc38.noarch.rpm
-737b90581ee376d243fd53038e58a085343b7cce8a5d96766eae3cda2fcbb27f  keyutils-libs-1.6.3-1.fc38.i686.rpm
-771239411daa202e43709ee80f968ecbbde284f9aaf2e424c7d68bbf59940112  keyutils-libs-1.6.3-1.fc38.x86_64.rpm
-7419671c64795b96be18231e2f5d3f95eca8e6a71771863ac035f961041c1d7c  kmod-30-4.fc38.x86_64.rpm
-b4021011438edc3e8a8ef6535f84e72829f6346716d079bd2cf032f72deff3f7  kmod-libs-30-4.fc38.i686.rpm
-19f873b67f23362074c03d5825e709ad521278c02e44bdeb30eba6d3bb3a8e0f  kmod-libs-30-4.fc38.x86_64.rpm
-ac8a7628a2a4b1f742fc90719145f50cfad9ecf67e3309fcf623fb3d82c2a768  kpartx-0.9.4-2.fc38.x86_64.rpm
-96c1846341e14589a7c66f4cf21bcc0788225b44ce652c5729299a701d31a2fa  krb5-libs-1.21-3.fc38.i686.rpm
-9ea8a9ddec5b16c157a9b3a6661957da3688969fa94c55ae9e0ba4fcb07539b9  krb5-libs-1.21-3.fc38.x86_64.rpm
-cd85189eaf04f22d46b5d704d454298735bcc830ddeac035c92091335367ba46  libacl-2.3.1-7.fc38.i686.rpm
-548bbee7926e3a5677c5c3495007c3494512e2ad70f38f6fd639e1e945168cdd  libacl-2.3.1-7.fc38.x86_64.rpm
-0d0890dba8274458d068b981164111f554b47632bf9c82d1ec41c14697f2b4af  libarchive-3.6.1-4.fc38.x86_64.rpm
-0ffba864821a315749a7ad1773eb43e506d26d4ef633cd0940188e76add8ebd4  libargon2-20190702-2.fc38.i686.rpm
-dd044973c572e64f505f3d00482249b2b4d71369babb5395a22861fd55b21d79  libargon2-20190702-2.fc38.x86_64.rpm
-03c7ea2565af3b61a6ff0d5d4e0e5c65747053fc43903b913a46337903c6fdb5  libassuan-2.5.6-1.fc38.x86_64.rpm
-8b43d1f6b92bf174e95ec60e2d6f0e5b2ed76177515c4e13e2b202d9a594c139  libattr-2.5.1-6.fc38.i686.rpm
-d78d7bc485f099bb08c9de55dd12ea6a984b948face1f947de6ec805663a96c5  libattr-2.5.1-6.fc38.x86_64.rpm
-9e73a2b591ebf2915bfbe7f9479498a73c982a4c74e96cc555930022e3ef0aba  libb2-0.98.1-8.fc38.x86_64.rpm
-dca5cafabf192d1f5abe37fa06425877bf74bb6e8c5ce5cad577274b18169b94  libblkid-2.38.1-4.fc38.i686.rpm
-21b5a1a024c2d1877d2b7271fd3f82424eb0bd6b95395ad3a3dae5776eec8714  libblkid-2.38.1-4.fc38.x86_64.rpm
-8079443881e764cece2f8f6789b39ebbe43226cde61675bdfae5a5a18a439b5f  libbpf-1.1.0-2.fc38.x86_64.rpm
-d206e2d18ff35ffc2d39a49db20abd3bd24274f54efb2af257f3bff36afe3dcb  libbsd-0.12.2-3.fc38.x86_64.rpm
-04fdf1cee0fc12ff10757a07beb1dd014a0f23def582255ff0dbd8472868f08f  libcap-2.48-8.fc38.i686.rpm
-df1ecff1c2d83b5256a03aaf9bda20cfd86def263645ddd677aaa3facc525561  libcap-2.48-8.fc38.x86_64.rpm
-5257031cba9a8791a277994e026b0f4c7a1cf2878505f5e1ed463fa670b67f05  libcap-ng-0.8.3-8.fc38.i686.rpm
-c0b6770708d273bcbf83d78f87353ca03629150e7a2f0efcadc24c41ca140500  libcap-ng-0.8.3-8.fc38.x86_64.rpm
-5922028bb5642faf00d781f34bf105ef30f1988932b4b80f6bb54e9f6eed0fd6  libcbor-0.7.0-9.fc38.x86_64.rpm
-ba35e2297e78af6c55bbb2a3e46a1d0819ced548088023d32f8f5dec2a9dfb88  libcom_err-1.46.5-4.fc38.i686.rpm
-4ed3e7b6b0727b86ae9af17bd4839c06762a417a263a5d22eb7fcb39714bb480  libcom_err-1.46.5-4.fc38.x86_64.rpm
-a9155b8c5ff621cfe0a6ee54987b152b33f49a63251d21c5fb6beba496c62a5a  libcurl-minimal-8.0.1-7.fc38.i686.rpm
-45059cdf957fae5afff225928a87416db8ea1b5f5df0aecbf783e5d20fcd63ea  libcurl-minimal-8.0.1-7.fc38.x86_64.rpm
-d7030af9e9e0dd9afc5b9ee02839c94757d6a4f8ebd3b21e6d81ba6141a76d46  libdb-5.3.28-55.fc38.x86_64.rpm
-03e5feb4dbd69587bd6312f535695bece8f0ab446a3d3145e293882066d6e0b1  libeconf-0.5.2-2.fc38.i686.rpm
-53271550b8c74d46cdba919257f07b2abbc09238b8eabc2689ed46c98a5f478e  libeconf-0.5.2-2.fc38.x86_64.rpm
-974a64a10a3021de8a440ff4810a720f738951abd5bb944110cb9355d4ae8fa8  libedit-3.1-45.20221030cvs.fc38.x86_64.rpm
-e9741c40e94cf45bdc699b950c238646c2d56b3ee7984e748b94d8e6f87ba3cd  libevent-2.1.12-8.fc38.x86_64.rpm
-768346084add1264110b08521694b0b25506b9c8b4bdbc53dc492b05cf70d052  libfdisk-2.38.1-4.fc38.i686.rpm
-2fb7ee2d94f7ee34cff49ab28659c07b075ed67ac147f817e19d8ee8e0adbc9c  libfdisk-2.38.1-4.fc38.x86_64.rpm
-cd08ba5d43459f6e3bbb3cc86caee43b74b38d551d69eae3e86861c2622da1cd  libffi-3.4.4-2.fc38.i686.rpm
-098e8ba05482205c70c3510907da71819faf5d40b588f865ad2a77d6eaf4af09  libffi-3.4.4-2.fc38.x86_64.rpm
-0a30628b39d9c5ca81c4e073dfbf64d543284f17d4ae1325e23e3eda55f92fd9  libfido2-1.12.0-3.fc38.x86_64.rpm
-0f1d789bbdec2c40888082b15993f3d2b4f1619dc03ee51a9952665522f5aa3f  libgcc-13.2.1-7.fc38.i686.rpm
-7abd50798a1ed1f0a1c1e8c2919ec8034f2a433fc83959baa43bbb5738d92a2c  libgcc-13.2.1-7.fc38.x86_64.rpm
-ef4b2686134e6be036755ee093aad43eb0ce4a4c84c93a2defb755cfeb398754  libgcrypt-1.10.2-1.fc38.x86_64.rpm
-f9515dd3d2db99409961b7eeec3be909fc75ac17f90b37ad899aa01fa56898a4  libgomp-13.2.1-7.fc38.x86_64.rpm
-40b98bdd00b44fbf808df1d653ecf0f0ed8549643d52b68da2455c5a878f0021  libgpg-error-1.47-1.fc38.x86_64.rpm
-9f2059c5d699f3dd2337f0872968123a06cf56b9f349d58bd64a5ef22a9815b4  libibverbs-44.0-3.fc38.x86_64.rpm
-cb38773f9a2cd9376e860963b16db0e5125b7cc6f9e9b2779eff6162baf0070d  libidn2-2.3.7-1.fc38.i686.rpm
-e7e1f6b3af094a9ad5c27dc33b72cbf266640a0a50c412e2f54bec5ef10e5fdb  libidn2-2.3.7-1.fc38.x86_64.rpm
-75c0097330fa3c995e80b7791cbe7baf75d86f3523f67b3becaf37360fdb4b16  libkcapi-1.4.0-5.fc38.x86_64.rpm
-e552fae193775507d8264f7a856fbdc51f7e594d7d8726f181312aeb9cf8b973  libkcapi-hmaccalc-1.4.0-5.fc38.x86_64.rpm
-4c5af4c1d44e1720beb79fd4202d3754e2c47c4faeb4ff5bdbe2ee3d24c9a5e0  libksba-1.6.4-1.fc38.x86_64.rpm
-96213462b3d77ef8e73d72510dd70210e9af4ae28f7466b88f2740743e6ca49d  libmd-1.1.0-1.fc38.x86_64.rpm
-f79da3b0edf002221250bce8352015009f8259793278ae59cb74d6c9e0c8395b  libmetalink-0.1.3-30.fc38.x86_64.rpm
-729b80bbf6ca427c21dd28d1f7029b736dc42f3f4f0c43d322ddfa168bc2ce9b  libmnl-1.0.5-2.fc38.x86_64.rpm
-34b0fbfe9493d0e0762bfe42137238f3eb9cee0832e1d816f5c9f0a48ac798e9  libmount-2.38.1-4.fc38.i686.rpm
-14541cda2a4516ad6a17f46be6b7ad85ef5f6508d36f209f2ba7bd45bc1504e2  libmount-2.38.1-4.fc38.x86_64.rpm
-db30396e0f1eb0ac81d353524bc2e022371a5e5a3bed363e101e461d8d248fca  libnet-1.3-1.fc38.x86_64.rpm
-cc6bca4b52d6aaca9b1cc1f4f02721301fba447a3d2f009a7b9e9c38da3eb10f  libnetfilter_conntrack-1.0.9-1.fc38.x86_64.rpm
-0054a179032b916330c202a4a5713d9403fedc0809ffc215e6345705f869633c  libnetfilter_cthelper-1.0.0-23.fc38.x86_64.rpm
-95a9876660af858339b38a2272c7307917f4cc15a6f4ffac4fbd4d6f6743473f  libnetfilter_cttimeout-1.0.0-21.fc38.x86_64.rpm
-e86f7341f80e9143a9cc1df8b7fcf864eccdea487fc34500b412678501b37146  libnetfilter_queue-1.0.5-4.fc38.x86_64.rpm
-3c981697fe61f23ad41b615b4c3197d023ec70f713395fc3104b837c61b74294  libnfnetlink-1.0.1-23.fc38.x86_64.rpm
-06f6aeaded732bcff2d7dd5c8b1c430bebc3834d0968f20e3c2918ae15502ace  libnftnl-1.2.4-2.fc38.x86_64.rpm
-9388cb06dc2a998c2390c5765a605a31b8fb1b04dfc783350bcfc371c7af8841  libnghttp2-1.52.0-3.fc38.i686.rpm
-3678594554e581cc2252996bace6e27d7ae2f4eaf054d2fabf2e00a3d8fd5f8f  libnghttp2-1.52.0-3.fc38.x86_64.rpm
-a9d80e55bd59e26338a7778de28caf9eb3874f8d90574c879bae1302beaa862b  libnl3-3.7.0-3.fc38.x86_64.rpm
-28697cf1b5cb4d62c3bd154fc24a23d91a84a5bda2f974fb64bdd04e91b6cec5  libnsl2-2.0.0-5.fc38.x86_64.rpm
-bf1e07244e3c9aacfe96b2b7f21e7bb678d1c52042885d3f0518301de38dd759  libnvme-1.4-2.fc38.x86_64.rpm
-f4d87eb23450cd3888af3d984ad623d229e5bea482188d25f996e61a939486bf  libpcap-1.10.4-1.fc38.x86_64.rpm
-e0bccc94a740acf317caa4fa1fae6b0d57442ef4be36341472b7db93d588ec13  libpsl-0.21.2-2.fc38.x86_64.rpm
-4625cab157ff1760c2f5053a3f75cec21b366f80c3b1ff53bf0db1a033a28439  libpwquality-1.4.5-3.fc38.i686.rpm
-aefb7d2d96af03f4d7ac5a132138d383faf858011b1740c48fcd152000f3c617  libpwquality-1.4.5-3.fc38.x86_64.rpm
-e3ef79196bc8cb77c35bd20f265f5a551ec3e8482a82ad92af3e802f9a302ad7  libseccomp-2.5.3-4.fc38.i686.rpm
-dec378b594b79258dd8b44836c5371f316bcf5e4596d53dd84badcb6d00090df  libseccomp-2.5.3-4.fc38.x86_64.rpm
-46ed6b8fee11c16bb8b58f698dfba9874a8f393c1e72eb7f9a7b6802ac68dd1a  libsecret-0.20.5-3.fc38.x86_64.rpm
-9c938bd9917a9f977ab0572e1cea573f2a886a0a0a48587463faa5ed1d6b22e0  libselinux-3.5-1.fc38.i686.rpm
-790c6d821ff575ad51242ec6832ed61c8a3c4e0ece245c3dee3292d19acb23b7  libselinux-3.5-1.fc38.x86_64.rpm
-78a15621e7e3dfb5a65b8b8aa482cf5b07f08bcef217ad29435e299d6c8aec74  libselinux-utils-3.5-1.fc38.x86_64.rpm
-1b6b7ad33391919a3315e398d737a764121e2fc9581f75318a999e02bfc0c7c4  libsemanage-3.5-2.fc38.x86_64.rpm
-14292c07496f6db6ef27913d6d144e01ce7017c57ef990edff3d04a443e5507d  libsepol-3.5-1.fc38.i686.rpm
-15ec70665f200a5423589539c3253677eb3c15d7d620fd9bdfe2d1e429735198  libsepol-3.5-1.fc38.x86_64.rpm
-ac0a6bf295151973d2e34392a134e246560b19b7351ced244abc1ed81dfe5b8e  libsigsegv-2.14-4.fc38.x86_64.rpm
-b35a0d6b1ecb151982b6a9342d00e8da9663e8a6da6b21b7c559634f7f29fd2d  libslirp-4.7.0-3.fc38.x86_64.rpm
-b71b1633a2b514d27dd9332d733f61ddd8c5a501360f9e8bafee313b793d6ad0  libsmartcols-2.38.1-4.fc38.i686.rpm
-dbf5c73c71c798533cbecfa54ba28c42878c455df8cb382087d8a758c3ffe290  libsmartcols-2.38.1-4.fc38.x86_64.rpm
-17da6760ce632b1726de4291f287f2928a70becc1ed414bb2e8b359dd1b7d815  libsodium-1.0.18-11.fc38.x86_64.rpm
-faccff819eecffcee9dad49bda930a007e78b905b775b4ac0103121d7a8100db  libss-1.46.5-4.fc38.x86_64.rpm
-f56ec42af2a6ce5206a5f6911d9b000d279f69d9936b195dd32e94132b83c95d  libstdc++-13.2.1-7.fc38.x86_64.rpm
-261adde7d452da52848797f1ed22a219e86a8cf516d2028b0b5f892c63aedf6c  libtasn1-4.19.0-2.fc38.i686.rpm
-8b49dd88579f1c37e05780202e81022c9400422b830d9bdd9087161683628b22  libtasn1-4.19.0-2.fc38.x86_64.rpm
-789ee4fe94d886a2708f63e20af1dfa58040ab4dcfb7eabc41b7daa1a678dc0c  libtirpc-1.3.4-1.rc3.fc38.x86_64.rpm
-aa187ea45be32306620ad8ec6318d755075b2cad99fba7c01dc4763228a98190  libtool-ltdl-2.4.7-6.fc38.x86_64.rpm
-981ba63cde3b9277cd01152a045f1269e586a53704f0a8f3409eb0bd7b4d3110  libunistring-1.1-3.fc38.i686.rpm
-c4012952872a08b9662963b13e29f89388ce6e695e68fa8c37eb6e62bad62441  libunistring-1.1-3.fc38.x86_64.rpm
-cd0e8eb5d983a985f7df99718fde6245997bdf088fb6086442a883ddb9ed03e3  libunistring1.0-1.0-1.fc38.x86_64.rpm
-5b8b49525a34e1aa2aef0be025d10d561f7c4f4a039bd1135ea69c9a117ec102  libusb1-1.0.27-1.fc38.x86_64.rpm
-1a3ce5232d21b6f41c4bf290768684f2e665ca600d95eddfba4c4ada02854b86  libuser-0.64-2.fc38.x86_64.rpm
-8ad1a4a44f1052c66318ca789042bedf43d7eea6282ab7872bfecd693b1393a0  libutempter-1.2.1-8.fc38.i686.rpm
-c5c409a2d5f8890eeab48b27b9f4f02925a6bbabeb21ee5e45694c7c9009f037  libutempter-1.2.1-8.fc38.x86_64.rpm
-b1a0a577a7d03111397b172c63ccf5f22bff39d1e97487d8f6962afc704020ed  libuuid-2.38.1-4.fc38.i686.rpm
-876ef0556ddeca2c8f56536c80a2f6e0f64357f40bacb92f483adb8a0ff29af2  libuuid-2.38.1-4.fc38.x86_64.rpm
-79f80f95acb8fceb4beaa6c1343bc07e9cf6b691ec0a77b79c82a2e74c5845f6  libverto-0.3.2-5.fc38.i686.rpm
-292791eb37bc312e845e777b2e0e3173e2d951c2bfbbda125bc619dced7f40bc  libverto-0.3.2-5.fc38.x86_64.rpm
-39851f80ad4890169e7979b248744acba5cadbc46c58e8e0316aaca1fcf386ac  libxcrypt-4.4.36-1.fc38.i686.rpm
-52d90d6fbd1ad93f81aad2c4aa38aa52b1c1c94b83560ede25c91b5542da97a4  libxcrypt-4.4.36-1.fc38.x86_64.rpm
-e5befc91bfd39ab624cf40c8a1ed32caedc0f74f9ea4fb913e4d9915c1d708c6  libxcrypt-compat-4.4.36-1.fc38.x86_64.rpm
-06745f933cdacd7ba3ce77a88016d2a16a1d1887a35b09fe97e574b5743cfa25  libxkbcommon-1.5.0-2.fc38.i686.rpm
-507ffdb912296768699a70c30169077b531b1612e47041551bfe523a4b7b6c7d  libxkbcommon-1.5.0-2.fc38.x86_64.rpm
-be808a1034e6cbf1bf789c960c3e9932b256006d3c29cd18ac3e52fb9f636377  libxml2-2.10.4-1.fc38.i686.rpm
-13f2ec62e10333000a13123a4cae5ebbda270c32ece03247e45bd2b244e7bba5  libxml2-2.10.4-1.fc38.x86_64.rpm
-665edd6dd24f817d4e80917341dabcd1215f76f74a5ce4961206b93343ad6107  libzstd-1.5.6-1.fc38.i686.rpm
-f5ac00f3d4dd4ed86d854372d06dd1685bcb3c348866a9795be9c5ad57c014ee  libzstd-1.5.6-1.fc38.x86_64.rpm
-27958b2623e06faf37e427fd4c9750a7b9df35ce38365a93caae068d24ebc95b  linux-atm-libs-2.5.1-34.fc38.x86_64.rpm
-f0a48ec36269d83120425b269e47ba5c86d5a9a44e0de2665c1d55c10732d25b  lua-libs-5.4.4-9.fc38.x86_64.rpm
-52898293cf358e998ef24ea977d6381b0a7229ac050f1c4599c5c25823256f7b  lz4-libs-1.9.4-2.fc38.i686.rpm
-96a8f495896c0ff7520c2cc5c9c173d134efc9ef6c6b0364bc7533aefb578d41  lz4-libs-1.9.4-2.fc38.x86_64.rpm
-36a1f0412e495e618ccd8636de3dcac9ad37d5d4c287a1acf2c9af4baa7745e0  memstrack-0.2.5-1.fc38.x86_64.rpm
-d5e2e8aed96b57db482e556f593efec98a3238c3a697904eb2eeaf2df7ac4d9e  mkpasswd-5.5.18-1.fc38.x86_64.rpm
-d9196608152ec34832cc82d3cefa90748f30c75986f2250d8cd0fabc3d0ceba2  mokutil-0.6.0-6.fc38.x86_64.rpm
-22f217f91fc2d2a666304c0b360520b13adde47761baa6fed1663bb514b6faf5  mpdecimal-2.5.1-6.fc38.x86_64.rpm
-e7c9b0c39f77c6fdf68ff04d8714c10532907a8a9c3e76fb377afe546247737f  mpfr-4.1.1-3.fc38.x86_64.rpm
-1c055813f64e964a2647da2c889fedb183d4ff27c8a4f4b0674bdbedaee9386a  mtools-4.0.43-1.fc38.x86_64.rpm
-8dce127ee00b28925e68e2790ff923b51df24441839f1551f30b60b3ea642a9e  nano-7.2-2.fc38.x86_64.rpm
-9a9dde9e280b31ac75e38051782f72f9dd6ea6077c04e0457b087658140895c5  nano-default-editor-7.2-2.fc38.noarch.rpm
-b13dfc1e217a6463fa500af2edd0e1146e2445d5449ece998553702603b68b58  ncurses-base-6.4-7.20230520.fc38.1.noarch.rpm
-eabd7ec125f94f3859df5823305be9cdd045cbcd3b98c9a284da1eb4be6de41c  ncurses-libs-6.4-7.20230520.fc38.1.i686.rpm
-0279d8f0ff51054aae596ff3dd8f00ddf6ec968dd6d70c5e3b0b6906eb146d33  ncurses-libs-6.4-7.20230520.fc38.1.x86_64.rpm
-27f45b29239f05a633283809a5b68d2c0a866a81f53ca8e43d835e6dac6bedc0  netavark-1.10.3-1.fc38.x86_64.rpm
-605d6710ba42104ce0434bb37b0ca9a922a8392c14175bc782f8acb70b94c3aa  nettle-3.8-3.fc38.x86_64.rpm
-1875738a010be9b1d593f02a95d14afba3742e19354641b851d00b6aaac78246  nftables-1.0.5-2.fc38.x86_64.rpm
-c9e8b62c6af7a60a505f881d3cc35294d8b4f51c671c05401133b02ab229c2a7  npth-1.6-12.fc38.x86_64.rpm
-db4c16743be18e806ac6e64577a981b227c686ba520161231e52c57831b0188c  nvme-cli-2.4-3.fc38.x86_64.rpm
-18139e4f2093499d384a1b8c80d51b661c252e4039c1235a6761a280d3260543  openldap-2.6.6-1.fc38.x86_64.rpm
-be8a3e233f7a19d84391f2d42f71276cc2053702635e00089b2cbe97372cff18  openssl-libs-3.0.9-2.fc38.i686.rpm
-dab96630b0d442164025469b4dce3eccccd482e76ad8ae6f6392045eae147f54  openssl-libs-3.0.9-2.fc38.x86_64.rpm
-9cec86553d3cd2facd166d5699fad9624d9b43a39da6fece2d54146bffae5e4d  openssl-pkcs11-0.4.12-3.fc38.i686.rpm
-cfa3d6feba480abdeb425bc045b525c641c7a864625b1864c2f5721903e364d8  openssl-pkcs11-0.4.12-3.fc38.x86_64.rpm
-06d2101874ea4d14b4c73131c5c359d1a2e0ebe0c36a501250026e7b867a0a86  os-prober-1.81-3.fc38.x86_64.rpm
-bf2316f23c31d27eeb86855d7c85bc1a696605156a4104d68079f43f7dbe60be  p11-kit-0.25.3-1.fc38.i686.rpm
-d64a3c3aeac4056185551050ca5eaac2427fc161d93015c20f0012cb6bab53f5  p11-kit-0.25.3-1.fc38.x86_64.rpm
-dea697370ede1848c1a54fdccebf792155d98cbdc5de89e85bbc75ec7c94de8f  p11-kit-trust-0.25.3-1.fc38.x86_64.rpm
-065b99f3541fd5f1281be2082b77e48b835a591776e92f2327bb0462c67baed0  pam-1.5.2-16.fc38.x86_64.rpm
-21c59eeb1ad62c09aadca6a4168f927ff943f82e4f764d589f5acb2ab6efc993  pam-libs-1.5.2-16.fc38.i686.rpm
-63e970f7b3f8c54e1dff90661c26519f32a4bf7486c40f2dd38d55e40660230e  pam-libs-1.5.2-16.fc38.x86_64.rpm
-8d846f866158409c775656b39e372d59cf224936d29972d3b6d14e40d3b832ca  parted-3.5-11.fc38.x86_64.rpm
-d24654d072849851ea193060828429dceada7b0634068d8c61e337a7db6fa18e  passt-0^20240326.g4988e2b-1.fc38.x86_64.rpm
-43603df046850c4cf067960d8e47998de5c33955b1f865df8d66f20c1b7f676a  passwd-0.80-14.fc38.x86_64.rpm
-f2737b94fa026a56c7a427f8f4221ff379ea4c4c32f2fff9d95a7a7836dcc6c7  pcre2-10.42-1.fc38.1.i686.rpm
-cb1caf3e9a4ddc8343c0757c7a2730bf5de2b5f0b4c9ee7d928609566f64f010  pcre2-10.42-1.fc38.1.x86_64.rpm
-756f64de1e4673f0f617a9f3f12f74cceef5fc093e309d1b1d5dffef287b7d67  pcre2-syntax-10.42-1.fc38.1.noarch.rpm
-48efa34ce50ae936ab9fe437aa59396d4557ff39fa22cf36c5460d3a986e502f  pcsc-lite-1.9.9-3.fc38.x86_64.rpm
-aa02afed121e9f5fa9590d75c0b237b6c497ae58c91e0022844b38f594feaeb7  pcsc-lite-ccid-1.5.2-1.fc38.x86_64.rpm
-07dc5536982278f38c89517465384ef9f376cd27f0b200806268723993da01ad  pcsc-lite-libs-1.9.9-3.fc38.x86_64.rpm
-e7509cf0ec99ce89e8e88e9352f733eb9ad14a9c77e0bbfd64826a3de0e4a150  pigz-2.7-3.fc38.x86_64.rpm
-e521385a42b3350c0d17e3cbddc0b69c9cf4052d1b77cc8bea2179e05b7d374a  pinentry-1.2.1-2.fc38.x86_64.rpm
-f9b541fc2f4bcdc06173e88cd3ad5f31a640dd99580e6f625cf8574b2f70fd8f  podman-4.9.4-1.fc38.x86_64.rpm
-440fc5c6e6a37c47f13d1fb53a03f5cb0155592a5bcf9312e2d083d4bed0ad40  policycoreutils-3.5-1.fc38.x86_64.rpm
-716096df1b34d768c3e6a5985de8e1ee58b2183ad9f987aa754e592bd2793c70  polkit-122-3.fc38.1.x86_64.rpm
-56705b6a1526960d534b0d3e4247deb4eef2b5fa64ceb03544281b8e9bdc4597  polkit-libs-122-3.fc38.1.x86_64.rpm
-7ffa0438229228bf5ba18945936d52c3620c95f4a3ffc5c5f0f8774fececac0a  polkit-pkla-compat-0.1-23.fc38.x86_64.rpm
-fb3fabd657b8f8603c6e19858beb0d506cf957bbca2f3feb827b64c94563b31f  popt-1.19-2.fc38.x86_64.rpm
-3d5eeb8914b509cebcdf9eb67a70b701727b0b9a77078cd5f6379d751febb969  procps-ng-3.3.17-11.fc38.x86_64.rpm
-8b3f681cd05e071d4c7b21eff4684a3ca7674599ee984cccd6a69a685eb8a41c  protobuf-c-1.4.1-4.fc38.x86_64.rpm
-6983318d6b2dfd4eea29448e9853b74b1d009ab37be7add3ff304ff0483714cb  psmisc-23.6-2.fc38.x86_64.rpm
-5d57133d4f5ace3ca45aaa59ae4b8f6e907a51df6503f3747ed0e5316de3b4dc  publicsuffix-list-dafsa-20240107-1.fc38.noarch.rpm
-b6416707be79fb1e9f99d0cb9b06a27fb045f88ec2f698e93117cc95cac7fff2  python-pip-wheel-22.3.1-4.fc38.noarch.rpm
-7417816bd96d7b49e5a98c85eba313afaa8b8802458d7cd9f5ba72ecc31933e3  python-setuptools-wheel-65.5.1-2.fc38.noarch.rpm
-4abf1cf4a1eacaa8755650704f0c8d4dba0814e648aae82df935a00d53bf46b2  python-unversioned-command-3.11.9-2.fc38.noarch.rpm
-a537a4e0e298651cf582b9af3ed3d843946837e94fef66de3041729533283d12  python3-3.11.9-2.fc38.x86_64.rpm
-64c68c1eb659020a6587b1b25e825afafe21effd05a9abdfa1b363f81ed400d8  python3-libs-3.11.9-2.fc38.x86_64.rpm
-92ff091ca65dbfb27dcbebe3087e55b64bebf204df0ed41c26de59497dbd023b  qemu-user-static-7.2.10-1.fc38.x86_64.rpm
-c6556a55be749a8c81edf22e47cb9c3385aaf69df7950f20312fa7f0818b9488  qemu-user-static-aarch64-7.2.10-1.fc38.x86_64.rpm
-1fe55e907d9efa0e02f398485859a795dea0fbb01d3a51658dc897874c75f1bc  qemu-user-static-alpha-7.2.10-1.fc38.x86_64.rpm
-93983430300c6aecacc79609266c8992218cbefc770446737b24ecadec803a6d  qemu-user-static-arm-7.2.10-1.fc38.x86_64.rpm
-2dde105930f7a0ab58963dcd75ff10deb561470b9851cedb036772d57b516fc8  qemu-user-static-cris-7.2.10-1.fc38.x86_64.rpm
-c04cb1d2af90898bb7f62c2c1c5de32c5396011f337d9f2f7c5e881058652f67  qemu-user-static-hexagon-7.2.10-1.fc38.x86_64.rpm
-2fdcfe0c3cd0dd2e9336f92f53b97a27a1c973f894544614454a2f31186dde10  qemu-user-static-hppa-7.2.10-1.fc38.x86_64.rpm
-fa377a67ceb5e802112b1f933f3e45875a5a96f5700402cb2bfcc57c5616896b  qemu-user-static-loongarch64-7.2.10-1.fc38.x86_64.rpm
-f98b74df09b005542d9974840c01e53f95b0e2d8b4574828f3bb4b175ea12d92  qemu-user-static-m68k-7.2.10-1.fc38.x86_64.rpm
-583e4f976b9c36fcd00216f1604ee2deb40de79e21336faae6a72f3a1242af15  qemu-user-static-microblaze-7.2.10-1.fc38.x86_64.rpm
-5b1d38b30548098ab195ca53402890c989a4f086498fa9fd0fc6fb829b53adc5  qemu-user-static-mips-7.2.10-1.fc38.x86_64.rpm
-3007aa9df16f592f65f3f8cec746c3d18675c6e0159b7ca923d3d73e37b1ad26  qemu-user-static-nios2-7.2.10-1.fc38.x86_64.rpm
-0fc37f72af3e36bd8010b7f82ebcb8c72daa55fb70d36935d531c356d7d747b0  qemu-user-static-or1k-7.2.10-1.fc38.x86_64.rpm
-2d56a0eca29c7574d2084777bb768f9614ec5677f731ffa47f065e00a5eef42b  qemu-user-static-ppc-7.2.10-1.fc38.x86_64.rpm
-8e1ca8fe6cfcdb8afefc6daf57768e88cae4ac7791b67c5ab10a8d02b831f07a  qemu-user-static-riscv-7.2.10-1.fc38.x86_64.rpm
-5de010899c1dff12909218ac790c473d746b10581a9ded18685e2a2f4de90500  qemu-user-static-s390x-7.2.10-1.fc38.x86_64.rpm
-624db7bdc1ff574a4898f4a11d3963c3924fca4fbe50cea50d87a9c0ce0c08e7  qemu-user-static-sh4-7.2.10-1.fc38.x86_64.rpm
-d6b4c9f28741540fbfac00f862386f499dd0e18bd8c088365f23b89ccfef8de6  qemu-user-static-sparc-7.2.10-1.fc38.x86_64.rpm
-c9d6bc6cd88a6b9c3c20879a7b738f8f8f4e5ab807f99488f81e509f2c2f86e5  qemu-user-static-x86-7.2.10-1.fc38.x86_64.rpm
-5bad311595e3efc8422ea082249852429beab87a1888ac663bfb4f96291fc191  qemu-user-static-xtensa-7.2.10-1.fc38.x86_64.rpm
-0de622e220594daf822dd0015e099b9940b5d92768703ead1b53e1daf06aecf0  qrencode-libs-4.1.1-4.fc38.i686.rpm
-49ec489f168c1671a2babb690edfb020a5252f38e8d0b2d96465070abd2b0d70  qrencode-libs-4.1.1-4.fc38.x86_64.rpm
-86394991888b35c06a424235d49750c02319f768d5e0da3554b57a4fba6fe513  readline-8.2-4.fc38.i686.rpm
-3c802e4ae00ad884944e7a3984e9c04b2a2929d408fa820622c4f5169263df30  readline-8.2-4.fc38.x86_64.rpm
-ff3ac983386ce4bc4ce48dc67bb0b50b8b078a35ccc6897597b82852a648bdf1  rpm-4.18.2-1.fc38.x86_64.rpm
-a30278c06ac5aa081864793a3960f7d2701f0d7f0b594724d9aec7b127f5b758  rpm-libs-4.18.2-1.fc38.x86_64.rpm
-1e8e041e2fe2bccbed82917515c8605c2ea1947dcfed95377f7f7b3038e0921b  rpm-plugin-selinux-4.18.2-1.fc38.x86_64.rpm
-9a56ebe2e1e807bd0c81ccb096a02ab1ffc34ffcd199da7f79ab352edb9aa0b3  rpm-sequoia-1.6.0-1.fc38.x86_64.rpm
-105ae7c0507c75babc124ae653dc0310988a0ae26a443c850c06b2cdd5709486  runc-1.1.12-1.fc38.x86_64.rpm
-61985efd54550e1fa9f31575eaa57232034d72d4eb169e88e70183d43727962c  sbsigntools-0.9.5-1.fc38.x86_64.rpm
-a6e01b89e814ec42d1c2c6be79240a97a9bd151c857f82a11e129547e069e27f  sed-4.8-12.fc38.x86_64.rpm
-1ca30603f77870649d272f7b2ebe19d665a82eac59d1b4d22bfe2f3232f25034  selinux-policy-38.32-1.fc38.noarch.rpm
-449bbedc1a557c50f94b427bfb56dabe5d363b729778061bb473a25bedf5c378  selinux-policy-targeted-38.32-1.fc38.noarch.rpm
-c7efb8634b62cdab9e8894174a8c70d20eb431482277231bc54fa8ca8c3681e3  setup-2.14.3-2.fc38.noarch.rpm
-8be96e09e2e44491b287be44b2b6be0c9f8aeab75fe061d3e8a28b9be19144ef  shadow-utils-4.13-6.fc38.x86_64.rpm
-46eaa576b2c5fcd167d9d88f823c309da0067fa8c4d35b7c535792fe862f05cd  shadow-utils-subid-4.13-6.fc38.x86_64.rpm
-8fc0ae5f47a2d868bbd44c5e65d68cec44272e6e7bbdc506217fa5c66499f872  slirp4netns-1.2.2-1.fc38.x86_64.rpm
-868aa887826ef8c81162b97ed4440949741ecb0d78bba12291b03bdccb917877  socat-1.7.4.4-2.fc38.x86_64.rpm
-be6d9e9b98733494ee5901d45b849e2dc012a6b41c3ff09d0d212002dbe15dce  sqlite-libs-3.40.1-2.fc38.x86_64.rpm
-ad3216eb991ad0aadfbfe63d43ea6ad2f9e0313cca979e0fc0bee6153c00c4d9  systemd-253.17-1.fc38.i686.rpm
-c8856089cfb4c9fd2181b83a9a11bb5e258219343c1aac43392590d24ba54c59  systemd-253.17-1.fc38.x86_64.rpm
-f37f8507d1f6ec31df274f419ef939a8da8625df1bd617fa04da88a93edfa7bb  systemd-boot-unsigned-253.17-1.fc38.x86_64.rpm
-a0bf879d762443195b4745096d7ee0afef4b71c9008042a3f06d9cd35162d197  systemd-libs-253.17-1.fc38.i686.rpm
-72afc9aa3d1be46865be92030d9a0d335f8bbb837a23da3ce6768a3e4f1a0070  systemd-libs-253.17-1.fc38.x86_64.rpm
-2421ffd359c18314abca938eaefe88b60d94115f9ba1df657127b5724e9bde4a  systemd-networkd-253.17-1.fc38.x86_64.rpm
-8cf0d2287ba9a6d9e33ce14784be068a1d61ea90a04c2817916e336cc131bb35  systemd-pam-253.17-1.fc38.i686.rpm
-5fc988295a9088a7055e6518ae691ce03740310bd3b9aa181ce66c951f70bcaa  systemd-pam-253.17-1.fc38.x86_64.rpm
-574e56f7ba9a84511c623abde48153c1351364d74f97edf4779db52c9bff3ad8  systemd-resolved-253.17-1.fc38.x86_64.rpm
-8cffcfd172b14d305d2672b73d5bf1298ed5c87307d4159c6d7ca68e65535647  systemd-udev-253.17-1.fc38.x86_64.rpm
-1d6caa060ef12ab32bf7220b49bc0d9c858c68a8f50b060f5117a2aca63a4dc5  tar-1.34-8.fc38.x86_64.rpm
-5cc364cad8cb613a0ec68076f7f8e10b72ef2e266a10d2463bf548b2b0abd13e  tpm2-tools-5.5-3.fc38.x86_64.rpm
-8adf29af85920514902bc4332ceb896a54f9cf89e08993c9345b62c4140f91d9  tpm2-tss-4.0.1-3.fc38.x86_64.rpm
-341f8e68b79c2bcac16e01f2fa9e1afc607c7fca3ef627be2abdf2147764016c  tzdata-2024a-1.fc38.noarch.rpm
-232da16c546617adde46ecaa1d5367acd05f75d04570fb367123b8dd01abdea4  util-linux-2.38.1-4.fc38.i686.rpm
-f0f8e33332df97afd911093f28c487bc84cbe4dcc7bb468eac5551d235acee62  util-linux-2.38.1-4.fc38.x86_64.rpm
-b57dbbbee14301e89df618b398ef39b7fc841eaba6be1b6346cf37ed7695c26a  util-linux-core-2.38.1-4.fc38.x86_64.rpm
-cb167e73a911cd10edcaf58a911f23e75581c27aadb7d2b48f9988057002a27e  vim-common-9.1.354-1.fc38.x86_64.rpm
-275f7257e70f8c060b088686d6bd22c327f9ffed0eb79d79a6335b41f85a183a  vim-data-9.1.354-1.fc38.noarch.rpm
-0da95855d82ce7249fe402f9251a54edd574ea7329fb1d8ec0f7d0207e21dc23  vim-enhanced-9.1.354-1.fc38.x86_64.rpm
-273bd9f355aee40d4220ba89e3bcf4bfe5f2a72f3ba84d1c1026f5a36a13398b  vim-filesystem-9.1.354-1.fc38.noarch.rpm
-a4c8b2a90705fed491f6f7f258904637c18773d323d39e97bf9036260b79a0f6  wget-1.21.4-1.fc38.x86_64.rpm
-2c8b143f3cb83efa5a31c85bea1da3164ca2dde5e2d75d25115f3e21ef98b4e0  which-2.21-39.fc38.x86_64.rpm
-84f87df3afabe3de8748f172220107e5a5cbb0f0ef954386ecff6b914604aada  whois-nls-5.5.18-1.fc38.noarch.rpm
-59a7a5a775c196961cdc51fb89440a055295c767a632bfa684760e73650aa9a0  xkeyboard-config-2.38-1.fc38.noarch.rpm
-fd60e5a90c7f28e2c9b72aabb17c7fa548330ebfa2e99d72d861e557562ceec0  xxd-9.1.354-1.fc38.x86_64.rpm
-e911703ffceee37ec1066344820ab0cf9ba8e43d7957395981ba68c4d411a0a4  xz-5.4.1-1.fc38.x86_64.rpm
-2b3a57c5ccfd4c99ec78d8420394387782a4ac57946d63800a406a4050c3d214  xz-libs-5.4.1-1.fc38.i686.rpm
-bfce8ac2a2a78a23fb931531fb3d8f530a78f4d5b17f6199bf99b93ca21858c0  xz-libs-5.4.1-1.fc38.x86_64.rpm
-e6971389d89ab454bbb372859b5aee67469a0b12e57d8657c0818bca78df22f2  yajl-2.1.0-21.fc38.x86_64.rpm
-c83464d6c93835b24b2c09d4c851f4a9bdacc70489a6c21447ed33ffd98c0d63  zlib-1.2.13-3.fc38.i686.rpm
-c26d4d161f8eddd7cb794075e383d0f4d3a77aa88e453a2db51e53346981f04c  zlib-1.2.13-3.fc38.x86_64.rpm
+e6231ec4268b3efa928250eb4106311e0f33396422245b938bfed4ba2d79c573  efitools-1.9.2-9.fc38.x86_64.rpm
+649b961082dcba4abcf10102c73fd3f9a6877176bdb302906d24b2da212904b6  efivar-libs-39-1.fc40.x86_64.rpm
+de10b1728571d2976e2f0f4cc5067d4575a5e97ec3914c57af537846ccaec753  elfutils-debuginfod-client-0.191-4.fc40.i686.rpm
+877c66844c68044b2a29b5d7465eb97f429e9f38b56ebaa16d766c0979e93a80  elfutils-debuginfod-client-0.191-4.fc40.x86_64.rpm
+3fbe1afd014386a436a25205d6727475a8f1107be734dd92fc40c3d5e0e5971d  elfutils-default-yama-scope-0.191-4.fc40.noarch.rpm
+36c4d77aa7cd45fb070273ac33ca3007ce0286c87be80072ef4f8fb4947405a2  elfutils-libelf-0.191-4.fc40.i686.rpm
+c1eca14924981b987f9b17c01a97511d641f49ac6b2b0f2d8e83563343932302  elfutils-libelf-0.191-4.fc40.x86_64.rpm
+393c5920c3b69834e5a75b05f48f04e696f509cb52c8055e686e63e677342547  elfutils-libs-0.191-4.fc40.i686.rpm
+d7d1ed3fca0696b8c38effe21bc70c84a94cb66c0b59bb1980c0f455d23b7fec  elfutils-libs-0.191-4.fc40.x86_64.rpm
+7be0991d79544dadcaa16c0a23c8fea9a0839b4f65db3664b3a4209358aa5ff3  ethtool-6.7-1.fc40.x86_64.rpm
+19d6e2f987c80d97b82c3d837d584eca60621b6d8cbd6797ba01a01ed8848799  expat-2.6.2-1.fc40.x86_64.rpm
+601842a8c2ed5c58481e7cf14c03d128dd7b8512304d144c37aee9c8a1c3330d  fedora-gpg-keys-40-1.noarch.rpm
+bd62f80ae7dc50c20b0633d86f1c4a9f205f7df13c8ee1a5d5f624872c29271e  fedora-release-40-39.noarch.rpm
+590c9439a81fb9e35a8b4d19dc159ce09b756f8f7f66a6290d8785f424d97003  fedora-release-common-40-39.noarch.rpm
+057acf25df0f6b028657790b2addca123faac0b80639ac6da13632dc7811d6f3  fedora-release-identity-basic-40-39.noarch.rpm
+4eb9b6ecc46fb6c7592de7faabd9c460fa5b551a7074d5e5da49f69c5b9d0e09  fedora-repos-40-1.noarch.rpm
+a6f2098fc2ed16df92c9325bd7459cc41479e17306a4f9cddfd5df8a1b80d0f8  file-5.45-4.fc40.x86_64.rpm
+f76684ee78408660db83ab9932978a1346b280f4210cd744524b00b2e5891fe1  file-libs-5.45-4.fc40.x86_64.rpm
+063af3db3808bea0d5c07dbb2d8369b275e1d05ad0850c80a8fec0413f47cd64  filesystem-3.18-8.fc40.x86_64.rpm
+f17ca5526d2cf34b82916a0cd1afe73d68856fdb5b19754312f61512aef0a7c3  findutils-4.9.0-8.fc40.x86_64.rpm
+2d6631d65e3b5c91afdb100a51ee8e50294f0e074a944c1662008d878d47456e  fuse3-3.16.2-3.fc40.x86_64.rpm
+a9c6502a5b190aaf169e93afd337c009e0b2e235e31f3da23d29c7d063ad2ff9  fuse3-libs-3.16.2-3.fc40.x86_64.rpm
+f4c2d51c7b4577f7b7ef498f8e2afb1b007da2de00cca28e220f50129c40a48c  fuse-common-3.16.2-3.fc40.x86_64.rpm
+f94315e447afb7442033b7b82e43a4ed62754f603afda53930280300855e46c7  fuse-libs-2.9.9-21.fc40.x86_64.rpm
+8fe84b7e0319afcc9c9eb28130b74e0cd7c675667a6ce075eb7ee2ec1b0014c2  fuse-overlayfs-1.13-1.fc40.x86_64.rpm
+6c80dfdaf7b27ea92c1276856b8b2ae5fde1ae5c391b773805be725515fdc1ac  gawk-5.3.0-3.fc40.x86_64.rpm
+c4cc69bf3a2655b9ee9ac23492d377bac57811c5b4f81fbf43537520ee33c7af  gawk-all-langpacks-5.3.0-3.fc40.x86_64.rpm
+21470eb4ec55006c9efeee84c97772462008fceda1ab332e58d2caddfdaa0d1e  gdbm-1.23-6.fc40.x86_64.rpm
+93450209842a296ea4b295f6d86b69aa52dd8ec45b121ede0d5125aa49bad509  gdbm-libs-1.23-6.fc40.x86_64.rpm
+1af2b6d450ecc168e5604654dc83433bf0658bba5cacd55377400d7db7db650b  gettext-envsubst-0.22.5-2.fc40.x86_64.rpm
+834c3441835069b61208792b9b9ae1ebfadadb9d2d211357d7f42838932b59a7  gettext-libs-0.22.5-2.fc40.x86_64.rpm
+1126bf8d28dff9f165865d83c239e6a2d3988fc935957b9b869d8ed7989a2ae9  gettext-runtime-0.22.5-2.fc40.x86_64.rpm
+0d07452b71741856258e6ddba673a6f0a9fbf2ade0d751ea2d735531f019c398  glib2-2.80.2-1.fc40.x86_64.rpm
+d271514135604e4bc7e0c7a1fefd4e7f619ea82a42df2322dc9c91ae06fc40be  glibc-2.39-8.fc40.i686.rpm
+041201b485a5d5b68d5324c9006d117c01c96459e6a7260ffc311bf13cbc3db3  glibc-2.39-8.fc40.x86_64.rpm
+df2dc4473fa092ba3b73522e8af9219d4d9aa71e56acbcd7265a1c0cd6825935  glibc-common-2.39-8.fc40.x86_64.rpm
+0b8d0bc78141e239697bd8d5c5af6dfcdb44b7ced3f0e6e7058c4ced6cc48c26  glibc-gconv-extra-2.39-8.fc40.i686.rpm
+5edcb7ad87a4008ebaa073ace1817407d7c13e85f90d55b07483937a7d8222cc  glibc-gconv-extra-2.39-8.fc40.x86_64.rpm
+3b474d0bb881ace5622f180b04b69d13da1602f28c719335e0d3779326c42831  glibc-minimal-langpack-2.39-8.fc40.x86_64.rpm
+b054d6a9ee3477e935686b327aa47379bd1909eac4ce06c4c45dff1a201ecb49  gmp-6.2.1-8.fc40.x86_64.rpm
+0a8b1b3fb625e4d1864ad6726f583e2db5db7f10d9f3564b5916ca7fed1b71cb  gnupg2-2.4.4-1.fc40.x86_64.rpm
+4425dbd35ab65f25b092d12ac56c4b565371a1c52ac882c8896dbeae7d52bbb1  gnupg2-smime-2.4.4-1.fc40.x86_64.rpm
+4a41802154b079185f306fb9a2e9522e2dc1b866b1f947707cdb04ee876f3fd2  gnutls-3.8.5-1.fc40.x86_64.rpm
+41eccf83033fa7ba4d181659eb2e3a94d8b276c6f75557ca0a3b7fd196733f29  gnutls-dane-3.8.5-1.fc40.x86_64.rpm
+8f4e437e2eda2636f58952f3f5f258313c1f5ff333407c08f87cd83c8f872dfd  google-compute-engine-guest-configs-udev-20240501.00-1.fc40.noarch.rpm
+94e443590221fb17e0330f076ebac32baab17b8d9c22566db372899ae750ca64  gpgme-1.23.2-3.fc40.x86_64.rpm
+6d54af0fc5ae216eb97720415acda4245ebc6c021420a2892b58620b5b25ca38  gpm-libs-1.20.7-46.fc40.x86_64.rpm
+8e2310f6cde324576e537749cf1d4fee8028edfc0c8df3070f147ee162b423ce  grep-3.11-7.fc40.x86_64.rpm
+50723d6fa868659466090da71ddaf59b5201a435de86b4e70d4f1e94de138f41  grub2-common-2.06-121.fc40.noarch.rpm
+cbba9b3c7947fd14a88a8a2c4d5d022ecf3e280b8d2381b3902ba95112677a97  grub2-tools-2.06-121.fc40.x86_64.rpm
+8cd674db8d05f6e4cc905dcaeffd353c2bb21c38d8bda4a0884697a068b631cc  grub2-tools-minimal-2.06-121.fc40.x86_64.rpm
+6a146fa9b154e67eb67eeb258df37814a863997c87171fdc2bd771e5a46b1cc4  grubby-8.40-75.fc40.x86_64.rpm
+6a502364cc7cfa1ec1918dbff2d678b4392c9f0279b66302bc8c039c36d7bde6  gvisor-tap-vsock-0.7.3-2.fc40.x86_64.rpm
+7976f6318044e7adbf543edb4d3da4fbc43ef628e433a0c55b4652dc1c15a735  gvisor-tap-vsock-gvforwarder-0.7.3-2.fc40.x86_64.rpm
+6dcc2f8885135fc873c8ab94a6c7df05883060c5b25287956bebb3aa15a84e71  gzip-1.13-1.fc40.x86_64.rpm
+a1e1c7b374615851ddc52fefd89fc4ea1850730f6fd840b1fc655a1f62a222f2  iproute-6.7.0-1.fc40.x86_64.rpm
+b15281c08e6840353cae883a90c19f6df757313ca8eb54c84f9312a88ae8c65a  iproute-tc-6.7.0-1.fc40.x86_64.rpm
+21e1196534fbb6d6a4f8d29a1e76518e2740ae53f63080fc811e7ce9cc6d0982  iptables-legacy-1.8.10-7.fc40.x86_64.rpm
+6e78bebc0bde8c2f1bd9c4a5f40010a779e7505a0fe87aab516db1bb4a840f02  iptables-legacy-libs-1.8.10-7.fc40.x86_64.rpm
+98115e0aa89bc9a8ec66c160af80cf32519db427a83d23d8f3dd9185b3aa591e  iptables-libs-1.8.10-7.fc40.x86_64.rpm
+99857ab7055ee14a0b4c3a77d1ee9b46217359c708d1bd4efad348595ea974fe  iptables-nft-1.8.10-7.fc40.x86_64.rpm
+9b4f2730a62955650c1e260e1b573f089355faf0155871e2c10381316a3b2e55  jansson-2.13.1-9.fc40.x86_64.rpm
+3a4b45b9f4746a7d3ce8fcb853fa65563051d2f6f31826b8007f6674fe3d8ce1  json-c-0.17-3.fc40.i686.rpm
+77e67991fcd4eea31f5b2844898a7854768548f0ab3abf7beaa91526afbf794b  json-c-0.17-3.fc40.x86_64.rpm
+c8e382e9de90e6946dd9bc2f706d6c307ea4ebba3eca91a283f1bb72b5b3ac9c  kbd-2.6.4-3.fc40.x86_64.rpm
+4764830a5f91f668f6348539777ddcbc2aa5c21f433f2ef8fec4c385db26233b  kbd-legacy-2.6.4-3.fc40.noarch.rpm
+61b2303ebb8e37c240b7cf10a8649dbdd2ddefcb571a4e6ea688cc3ad9168970  kbd-misc-2.6.4-3.fc40.noarch.rpm
+547bb1919671ef5b3f7ee40dac55d6d681374fe7367fb7c369b02b6287c25fca  keyutils-libs-1.6.3-3.fc40.i686.rpm
+387706fa265213dc46e4f818f30333cc93f0c54539cbd2ec4db3bc854077307b  keyutils-libs-1.6.3-3.fc40.x86_64.rpm
+370582ae0ed0dd607ec38e92eba4b124a4b2ec3835f3f4c1e5ad8255ee11d692  kmod-31-5.fc40.x86_64.rpm
+42994ac67877595861b55adafd75ab3ce02d397e2ccddac8fb40ec0fecb4436b  kmod-libs-31-5.fc40.i686.rpm
+53dd95341767a2ea40b68e4621a231883bd5b69426f0920ce1f1ca94e18765cb  kmod-libs-31-5.fc40.x86_64.rpm
+9a03b21936528f6d08700757cb460c48e9557a71efaaa5e93b01b3f7614320f3  kpartx-0.9.7-7.fc40.x86_64.rpm
+b71c8e48abe4b3f4898e59233bf071b75ae9a58c691c7d1b988c661b700931ff  krb5-libs-1.21.2-5.fc40.i686.rpm
+9fa9b3dc437120759814d4b33f05d84b4317f55dc310d8075f4555f341e25ff1  krb5-libs-1.21.2-5.fc40.x86_64.rpm
+6f2f0a522f2f10f273a77a60fdb7e066c14059d0a3676c9f723162daa7110b42  libacl-2.3.2-1.fc40.i686.rpm
+b753174804f57c3c6bae7afeb6145005498f18ae5d1aa0d340f9df5b8d71312f  libacl-2.3.2-1.fc40.x86_64.rpm
+a8492446b11c5813bde22268957d6bd74b7a5eab9d0cb77dee47bbe23bc01754  libarchive-3.7.2-3.fc40.x86_64.rpm
+e131ab89604dbd4fdc4f80af632099e48bf68bb328dbf0e7dcbef1d1e134dc09  libassuan-2.5.7-1.fc40.x86_64.rpm
+67facd893f5082be270d0887a43ba22492c47e652e06e5d53ecd681a1aec8ac7  libattr-2.5.2-3.fc40.i686.rpm
+504cff39c51a04c1d302096899c47dc34ac0eba47524c2fc94c27904149e72cf  libattr-2.5.2-3.fc40.x86_64.rpm
+649cceb60f2e284f8d5dadeec4af8e7035650fe0e5aa75c552354b3fa5708cfe  libb2-0.98.1-11.fc40.x86_64.rpm
+46e35f0fcf3c5ac842c4fd7ba63c0106b73fa2250a9ae1f8e92c53d552201d7f  libblkid-2.40-0.9.rc1.fc40.i686.rpm
+f4278c28f2bb21b0c24a5975384a5ccfc0934504d8a7c036ca1346b7683e1b5c  libblkid-2.40-0.9.rc1.fc40.x86_64.rpm
+688ef20e1e1fd0e3884c9f0070a3251636a81e08d299b13609dfb4152434b5da  libblkid-2.40.1-1.fc40.i686.rpm
+0870933f0565a25e0cbf5246dd754722f5df9946f4f5c09cf420e85cc1a1e4fb  libblkid-2.40.1-1.fc40.x86_64.rpm
+e653f622e46e8fd6a5d7fd1ba3d4691a7a7f57ae54879da4577c0788b7da2c4f  libbpf-1.2.0-3.fc40.i686.rpm
+6aaea5de69154d81ef39d3faa72d42d04ae57fc5071492d6ccb9899ca43948fc  libbpf-1.2.0-3.fc40.x86_64.rpm
+97e9e5339bb0ca6ce3d0195c8ebe48384bcfc087ee6bc7a35b1d27d4de23fbfa  libbrotli-1.1.0-3.fc40.x86_64.rpm
+8163fa05deeb06414a6e9ad78ba8d3e65eab9af87f35f0790f8c81bee8359ab6  libbsd-0.12.2-3.fc40.x86_64.rpm
+0bdb66863b60abc8c2ca540e80ef58e9d4da3f700b685ecc49042616387dee8d  libcap-2.69-8.fc40.i686.rpm
+6c92fc0c357964d2b57533a408ec93b7fe5214c1f0b63a6b1c0564b2ba5c481f  libcap-2.69-8.fc40.x86_64.rpm
+9b11d2f4bd3e8fd56028deb22e86e175c5d91017db81413f108f0841a9a02349  libcap-ng-0.8.4-4.fc40.i686.rpm
+dc22477c3ac762f92ecc322af4f39fee2c5371bedc495ce242f9b94c590c580f  libcap-ng-0.8.4-4.fc40.x86_64.rpm
+274fd72d27570f3fcc9f06efedd21ea7a71e0903c286222fdbbefd6b30b9a80c  libcbor-0.11.0-1.fc40.x86_64.rpm
+c890a19d2c4a3da836bae1db40b778fe0339cd0d26bddfbe584aaccb1a0f1485  libcom_err-1.47.0-5.fc40.i686.rpm
+0d100701976c37fe94e904ed78437db7477ae1dc600ece07bea23fbbd968762c  libcom_err-1.47.0-5.fc40.x86_64.rpm
+7cacae48a3f76e77ffae047db34146efd3ae45b51188431a161ea93f83b9a231  libcurl-minimal-8.6.0-8.fc40.i686.rpm
+df01bb4a19148d5ef8bad7e97d6b9ff0926bdd6c04f97620b27dc3d2ff9059cb  libcurl-minimal-8.6.0-8.fc40.x86_64.rpm
+783f1bc7ab5fb88b5bfaea82f70457fba8e76bde5821b61bafbb1acb301f9834  libeconf-0.6.2-1.fc40.i686.rpm
+05ad4ddff82db6a9c6cec0fc0188ae3a946c1387fbf69773eef9b9cd21c36251  libeconf-0.6.2-1.fc40.x86_64.rpm
+2c4a70a136b81fd13407660b999546f88568b477e86404793ba15c4325f2ab3c  libedit-3.1-50.20230828cvs.fc40.x86_64.rpm
+c4adcee5dd9e22ea50d6c318ac4936a8df708121741958ce5aa8f038c46c61a9  libevent-2.1.12-12.fc40.x86_64.rpm
+a1ba3045c99ef1b266383f0801731a68f9e0cb069a6c808267ad33b759381907  libfdisk-2.40-0.9.rc1.fc40.i686.rpm
+17f02ca51b90580887d739f52b995034e0929fc6bcd92be308554a2f5337bbe4  libfdisk-2.40-0.9.rc1.fc40.x86_64.rpm
+c8b9967345ed0393c17101b970bb86258380494d99edf07787bc32ee4de96a7b  libfdisk-2.40.1-1.fc40.i686.rpm
+2481691bd2ee6aab48b1a0306357337007b2b0af082e4fdef47dcc5a8a8357be  libfdisk-2.40.1-1.fc40.x86_64.rpm
+25caa7ee56f6013369c2fac26afd3035a7d580af0b919621ba8d495d13a5af86  libffi-3.4.4-7.fc40.x86_64.rpm
+f9c5369b6d168a2b8e46159bc41ef0755ee1a8d12f4c6766fdfe23e827cf5cdf  libfido2-1.14.0-4.fc40.x86_64.rpm
+1fa9fec23745248ce8a2684a01daa3bed2cf181f09fb3b316a69be2c99093008  libgcc-14.1.1-1.fc40.i686.rpm
+d42d466e052b7926a4f9bc7d6620f1d3f8e2c4610665d224a032264a09b2dd19  libgcc-14.1.1-1.fc40.x86_64.rpm
+10c4c12c6539ffea68974cd9b57013d471ac35fe3bef4833c0a22f6b29fbf489  libgcrypt-1.10.3-3.fc40.x86_64.rpm
+4d1d4538f152eaff22aa957ebdc724148f31519d75e6a56699ab2698c0699f59  libgomp-14.1.1-1.fc40.x86_64.rpm
+8d0a9840e06e72ccf756fa5a79c49f572dc827b0c75ea5a1f923235150d27ae2  libgpg-error-1.49-1.fc40.x86_64.rpm
+677a67726c759c94faa94475185e46d028f171c9215390ac601ccd914188afb2  libidn2-2.3.7-1.fc40.i686.rpm
+2fd2038b4a94eeede34e46ed0e035e619f77d0e412c70cf4e9bb836957e8f31b  libidn2-2.3.7-1.fc40.x86_64.rpm
+e6dd9a7c8c5e03f30363a1bd3abe97a33fed294c695a9d1029587635bdb9b04e  libkcapi-1.4.0-10.fc40.x86_64.rpm
+8692d0bfe4c5ed1fa4594dae4d020815217ed1999676cedbef58e6c9549d681d  libkcapi-hmaccalc-1.4.0-10.fc40.x86_64.rpm
+a77eed0fe1b84c11f9175f4642db058753d4eaa1f88e999f01df72e1d10a3826  libksba-1.6.6-1.fc40.x86_64.rpm
+d5d9c95e38aeb8c852cda4516057d86a5fec2485cb3413067d625059a4d97b30  libmd-1.1.0-4.fc40.x86_64.rpm
+7b307e95fb7584889d35108de86ebfa34d0aea6eabb5a68d574647f83f25ed77  libmnl-1.0.5-5.fc40.x86_64.rpm
+4aa44fc80c1d3e3496a406740b9ae3ada3df28b37fecc611e44183f542758f76  libmount-2.40-0.9.rc1.fc40.i686.rpm
+c5231753426984926daba70cc61d20e777048e91167f2e3c217e21e9205573a6  libmount-2.40-0.9.rc1.fc40.x86_64.rpm
+f5946a9bd8432cba1475e4fafedc2ab3493c1c9e02a062a605c9d4add001ebbb  libmount-2.40.1-1.fc40.i686.rpm
+2589c1e241991dbefd89188aabd9b1f99c277bfee30c300a185633df3caa7913  libmount-2.40.1-1.fc40.x86_64.rpm
+157c1256a9529dea2215f6c77f40647baf19c6f8ac6058934c0f2a593f436c4d  libnet-1.3-3.fc40.x86_64.rpm
+a2d50812dec895ba654fc424a458e99ceb81423046ad870ffabfef3081382ef6  libnetfilter_conntrack-1.0.9-5.fc40.x86_64.rpm
+3de45cea1d877e58f1a8fadb3902e585c070bfd2813bb107145a2f28a2e6edb3  libnetfilter_cthelper-1.0.0-27.fc40.x86_64.rpm
+aa2f6d8990f059ba985681d8a6d1695730bbe798014d5bd4b6aa112f79b386b3  libnetfilter_cttimeout-1.0.0-25.fc40.x86_64.rpm
+ad8d041ab07f62567f80e9a751529091f591a542dd91b6473b7cba5749b56d69  libnetfilter_queue-1.0.5-8.fc40.x86_64.rpm
+78055d1a143d118b9b5513e6621c31d19858c593427b6343a42655eb147a44ed  libnfnetlink-1.0.1-27.fc40.x86_64.rpm
+db4841a294c5ec3759d77f356a05d0c7f852270aa75c900daac4992f12147dd3  libnftnl-1.2.6-5.fc40.x86_64.rpm
+0e9b7c72112f58e83d66422eb2d77d346dc0810cdb652906f0d0fcbd9799fc7d  libnghttp2-1.59.0-3.fc40.i686.rpm
+550160732fc268914a422cfddc3c745febf8da161f8eacbce8649c67117b1476  libnghttp2-1.59.0-3.fc40.x86_64.rpm
+7bfd9a41bedcf082dcc40ba2a980115ccdb1a843b9d28912a3bd8d99771f6015  libnl3-3.9.0-3.fc40.x86_64.rpm
+fa6dccd7aee4a74a5cfa12c7927c7326485704ebe57c54774b0f157fda639360  libnsl2-2.0.1-1.fc40.x86_64.rpm
+9e27ce1072ef67dd8877175f9a7daa1bcddbbcec3fd6f161e6bc2f2b453c360b  libnvme-1.8-1.fc40.x86_64.rpm
+bb9ceaba0d3283777777524e8c99b8eaa2155e9000d8e3ef5d0ece336f8c1392  libpsl-0.21.5-3.fc40.x86_64.rpm
+87e8725c378e16a983abee0b8bfbdaf2214f32b55c822741e627db34427ed9a3  libpwquality-1.4.5-9.fc40.i686.rpm
+210e797a265da7111c1a59eca95f9e301ad05c5c8772aed54af9363e5684950b  libpwquality-1.4.5-9.fc40.x86_64.rpm
+c34657225d5c9c57dc9261e765cb85704397eec6ec4fa01a6ee6ae2b2fcf87dc  libseccomp-2.5.3-8.fc40.i686.rpm
+40e88dedc3fc64e70f0c2c16af598d9701c089cd205d5bf312517984bf0194fa  libseccomp-2.5.3-8.fc40.x86_64.rpm
+280edce0c5cda3a725edaca0db10a16d1c4b24b849a8ddfeac066ddb84057e6e  libsecret-0.21.4-2.fc40.x86_64.rpm
+97f18f8852a7b60a2990f6cb25f39de0593599eb6ba0e455436bc783f34b931e  libselinux-3.6-4.fc40.i686.rpm
+b67135643467acef3417d6f961ef3dc987ca726681a25026fce29cbd15fa76f9  libselinux-3.6-4.fc40.x86_64.rpm
+33dd223a3ca3ef3e7128c84016f7cc95829802fc6a0d4f0c0329632fc6a2a2fc  libselinux-utils-3.6-4.fc40.x86_64.rpm
+1313cb0d72005c8b469466a7ee12a7c30b7e283ed5ed0f601d2c911fa84d5137  libsemanage-3.6-3.fc40.x86_64.rpm
+d5e6fc8b4595cccae415bc18b971ea4a4ed64c816e45de5d3f588b78ecf12708  libsepol-3.6-3.fc40.i686.rpm
+2a84c1dcbf391374eb7f66f75a5ce62eadf11241f33d4df950a7bd94a9e0853e  libsepol-3.6-3.fc40.x86_64.rpm
+716b91d85eb887fe10db607608294475289b9e9fc4d51fbddcf24046ea016147  libsmartcols-2.40-0.9.rc1.fc40.i686.rpm
+34111597814e385c8c1cdd48ff72c4ed64e7e6ed9bd6660bb2bfda6aebdb3200  libsmartcols-2.40-0.9.rc1.fc40.x86_64.rpm
+302124d98a491472ec0982b89afbf576922d6921a89dda479d354e6582566f0e  libsmartcols-2.40.1-1.fc40.x86_64.rpm
+91d67f2a3be65b2904c432f4585189540978dcfb6ef994c2eaac5b7cfb4010a5  libsodium-1.0.19-4.fc40.x86_64.rpm
+c8bbfa2762cc601f8a97d8d5a39a658f0e91ba477ebebd798b30f7fc8ffdd457  libss-1.47.0-5.fc40.x86_64.rpm
+b37a2a57ff60a21e0ac539f994e6b87b849684cb721c795bf6ddfe6cdc161c00  libstdc++-14.1.1-1.fc40.x86_64.rpm
+d92173d6fbfb7e2af3b35a8554229e247666e15dc5b36cba43b7bbfc4144b781  libtasn1-4.19.0-6.fc40.x86_64.rpm
+adc082c8d4af5cc81a9de428c39de59717177109aedb4b15888a8ca9d51167ab  libtirpc-1.3.4-1.rc3.fc40.x86_64.rpm
+e5d150d23f95e4a23288b84145af442607a88bf457c0e04b325b1d1e8e708c2b  libtool-ltdl-2.4.7-10.fc40.x86_64.rpm
+e541a1c8397dccf159b3602eb6bbb381ba21c544db337a3b3bfc49ccc2ef5c21  libunistring-1.1-7.fc40.i686.rpm
+58719c2f205b23598e31b72144ab55215947ad8fca96af46a641288692c159d2  libunistring-1.1-7.fc40.x86_64.rpm
+813c8cb7828e15c0de655b215d456b8049ed7e8454f4e56026762359b4870a62  libusb1-1.0.27-2.fc40.x86_64.rpm
+896d671852ed3f28e8c778dca361c5b5c57a89855df11755e6be1d088f64d43a  libutempter-1.2.1-13.fc40.i686.rpm
+0093a8d3f490fbbbc71b01e0c8f9b083040dbf7513be31a91a0769d846198c1b  libutempter-1.2.1-13.fc40.x86_64.rpm
+5aaa12bba361ae29b2a6b35c4b21da935423bc2ad763eaa8267008c7a533cb3c  libuuid-2.40-0.9.rc1.fc40.i686.rpm
+18ae5558dd719fcc92bd4d2c7c73c6a093af82a35c67444ccc9cdf4b3dce1824  libuuid-2.40-0.9.rc1.fc40.x86_64.rpm
+66f09c3f1128b27e4bef6b095f6d4de6cc85e5c83b22aa867b522069e10f82eb  libuuid-2.40.1-1.fc40.i686.rpm
+833153a38690923cfdfb9645061ea48249bacb33449c819dd340a0a8424cac98  libuuid-2.40.1-1.fc40.x86_64.rpm
+bea578631618692ba5e302beadfdf6d5894e23e5bddaea4b4fca2f377dd1aaac  libverto-0.3.2-8.fc40.i686.rpm
+fadf7dd93c5eee57ba78e0628bf041dbd2ea037ace52f0a5cbac55b363234d27  libverto-0.3.2-8.fc40.x86_64.rpm
+2e2ab8784cce3e877f87977f651a046faa2121d716d06daa510981f7d946dba2  libxcrypt-4.4.36-5.fc40.i686.rpm
+26c27a101cf40f84f313d81a28cbca9450e8d901e6fcd315ac6036895a369b92  libxcrypt-4.4.36-5.fc40.x86_64.rpm
+a17f9a8894a00ee97a42219b3b21d64bfb850d74059d89ae299210bc477e8967  libxkbcommon-1.6.0-2.fc40.i686.rpm
+1f1d0c1e1132016735acc6fc3390102b35f9eb257244547c7b61c32a9c2314cc  libxkbcommon-1.6.0-2.fc40.x86_64.rpm
+a8b9940585cfd8f3a6e18e9ab63b0cc0f401bedba1e12d46b4c62c4a469e52d7  libxml2-2.12.6-1.fc40.i686.rpm
+a4c3648577f35a59c7b1e4437bfa493d737156cbcba798c7cfa1d8f081969c83  libxml2-2.12.6-1.fc40.x86_64.rpm
+cd866911efd52e3a70655df3da9d71ad2f4a326463aeaa381493a7547e14871d  libzstd-1.5.6-1.fc40.i686.rpm
+bed3075b9ff919eded25cb45e9e03b8a7c63bcc8e893ec28c999aecaa68c51d3  libzstd-1.5.6-1.fc40.x86_64.rpm
+81409455da42a5ffdcf5b8cc711632ce037fec25d5ae00cbfda5010c9db04157  lua-libs-5.4.6-5.fc40.x86_64.rpm
+2d1da8faf26c647a7299f840cfa199f20415ceb99a4f694ac3cd07f645f02cf5  lz4-libs-1.9.4-6.fc40.i686.rpm
+f5f022440c4340b5e7fb1c1dbc382e6b0fd57030b3ff056940f2bb3d254408ec  lz4-libs-1.9.4-6.fc40.x86_64.rpm
+55d5c4384bdc13290a7824aa566d1d20bbbc99f5dde4e057bd12f4f47845e28b  memstrack-0.2.5-4.fc40.x86_64.rpm
+2030e8622b6f9ceb4b56f5c771ae7e4ccbff3d8bf563df5bf929725f4c4f18c9  mkpasswd-5.5.20-3.fc40.x86_64.rpm
+03fbefea8c8d8465cf1caf66870fb935292ee18b4ca341853b5576ca9c7801eb  mokutil-0.7.1-1.fc40.x86_64.rpm
+0a3a3fc2471d2d64cbc85f4b23c93620df6eeee814851a2b69fc5ddf75406b56  mpdecimal-2.5.1-9.fc40.x86_64.rpm
+ef6285ceb3baff0bef0e541094c04a899dda37c5961b053b58be2a4a9085302f  mpfr-4.2.1-3.fc40.x86_64.rpm
+ed211fa5d0d0a70e4db0099a01e7b7a46f28b064e2af7064d3c7836663229917  mtools-4.0.43-4.fc40.x86_64.rpm
+7dfae7d898dfc40f3fe1fc66104cf31e434e866fec4d4944b55952d7f2f16657  nano-7.2-7.fc40.x86_64.rpm
+b404c27af03bb1e43fb0dc472d5a1fa152e0563fa2e4eefa29199c47578a829b  nano-default-editor-7.2-7.fc40.noarch.rpm
+8a93376ce7423bd1a649a13f4b5105f270b4603f5cf3b3e230bdbda7f25dd788  ncurses-base-6.4-12.20240127.fc40.noarch.rpm
+39bba59320e6276a3b7b07bc94d319511bdd7d32ba098fd49723f4d542794d41  ncurses-libs-6.4-12.20240127.fc40.i686.rpm
+a18edf32e89aefd453998d5d0ec3aa1ea193dac43f80b99db195abd7e8cf1a04  ncurses-libs-6.4-12.20240127.fc40.x86_64.rpm
+07253a2a49c6554632408bc006af14847eb5d89551e7221678de5f24a228ce8a  netavark-1.10.3-3.fc40.x86_64.rpm
+16172412cfd45453292e18f84fc57e42a3ce92aca72b47ef7e15b44554049cfe  nettle-3.9.1-6.fc40.x86_64.rpm
+188ce5004e6ed764b4a619b64a4a0f36f1cc4fa919fe0a300599ff1171844144  nftables-1.0.9-3.fc40.x86_64.rpm
+784e0fbc9ccb7087c10f4c41edbed13904f94244ff658f308614abe48cdf0d42  npth-1.7-1.fc40.x86_64.rpm
+f814bc09b50daaab468715088ec056373dbc209a5075306e4ce76f5c55eb2b42  nvme-cli-2.8-1.fc40.x86_64.rpm
+b09089231ec94ee1b2dc26e34d8d7f19586d411bc40df7d0e495e559ac2d871a  openldap-2.6.7-1.fc40.x86_64.rpm
+2fa5030d1c80979dd5fd0c304e4151282e0eb2749186926c4d8283c4ca14340f  openssl-libs-3.2.1-2.fc40.i686.rpm
+eba1bd09317cc1f1f80e722e9a545dd404e1fad444045438f254e99cab4f1ed6  openssl-libs-3.2.1-2.fc40.x86_64.rpm
+9f0336deb6f1b1524ec48d837622e7e2291995369b0356d7ad1e1d427f3b659a  os-prober-1.81-6.fc40.x86_64.rpm
+2c8e47f98df74fe89b23f0a1347aba91383da06e0ae903949b015943da4e1b5b  p11-kit-0.25.3-4.fc40.x86_64.rpm
+93159ba4fffd7c91bd28d3942564368c402dc65ee7998e81688f3d566fe7633f  p11-kit-trust-0.25.3-4.fc40.x86_64.rpm
+9997fbbe5aca567c2d8afc5d745034bca0a4d8bda62ea7f88122e0dff2dfcdf8  pam-1.6.0-2.fc40.x86_64.rpm
+ac7b46f2807ec0faa6dff991c89875b7ebd7edefef5b0ad75934196405303c7a  pam-libs-1.6.0-2.fc40.i686.rpm
+8b233033e715d594326fe5ad84c06361928a787299c734206de7deccff7b3c10  pam-libs-1.6.0-2.fc40.x86_64.rpm
+9bbce784622e02af0371ced8e9a7d26adba7eabd66ecfcb8bbe2d24cf616e3c1  parted-3.6-4.fc40.x86_64.rpm
+88ed733f4474cd561c7ccda6031190367156aec2317a675dbb9f799c80016dcc  passt-0^20240426.gd03c4e2-1.fc40.x86_64.rpm
+771176f50aebf7916d4e0ee2ea6caa82bdd570ec7085292661ea8f5724b45cfc  passt-selinux-0^20240426.gd03c4e2-1.fc40.noarch.rpm
+757dc11e76123116a505879b5b00dbb1f132b25578f738979220397965d7fa38  pcre2-10.42-2.fc40.2.i686.rpm
+8d36bcee4d3e39d5b8162ab8de347bb0f7d7b260a6b6c76bc4b577c5bff6ba5e  pcre2-10.42-2.fc40.2.x86_64.rpm
+f2042a010126c04faea45cea4b62f8443e73f4a0a218858092e0fcf5ca7967fa  pcre2-syntax-10.42-2.fc40.2.noarch.rpm
+d207e7cdb8602403c8aab36c1342f55bcb4503bf4e296d11dae013e6fd9ac920  pcsc-lite-2.0.3-1.fc40.x86_64.rpm
+cbd3f6cdbb19126dc703f140fafcac84d0d2ef63b54dfa08332d4bce2def076f  pcsc-lite-ccid-1.5.5-3.fc40.x86_64.rpm
+f796a31cad58f4ebea8787020868581d9a721297ee0ef6a7c63a7f8444f60c17  pcsc-lite-libs-2.0.3-1.fc40.x86_64.rpm
+5443db8875acc0c1c436dbe1ed62b776543e049b8d9c7e33198379d367814093  pigz-2.8-4.fc40.x86_64.rpm
+cb7c5036f1d25c696de23a6670cb64caec9945116fb0c9a93555414746ecf253  pinentry-1.3.0-2.fc40.x86_64.rpm
+bbb4abafa9f7664e21350b56d49af2c928288e6d4dd68c304c4ab5d45b2c8ad7  pkcs11-provider-0.3-2.fc40.x86_64.rpm
+8f71536999a1ac6ebc148050382cc9716d68577cc49afeebd64ac0d5742183a0  podman-5.0.2-1.fc40.x86_64.rpm
+fc0270713aefd482937adc4d6905f806760ea54c70379cb675be521251e5a177  policycoreutils-3.6-3.fc40.x86_64.rpm
+30a4f9d3631aaa1280c93ce4305847a9773973aa312e1802d1cd676cb2421689  polkit-124-2.fc40.x86_64.rpm
+f47bc65177a8b160916c00df9c84442afa1dd353880b3c0503d5a0b052d4956c  polkit-libs-124-2.fc40.x86_64.rpm
+b7decdd8a6fcb175fea2bb39bb1dbecad1ba820c365bab5a273a7b3982e55157  polkit-pkla-compat-0.1-28.fc40.x86_64.rpm
+c03ba1c46e0e2dda36e654941f307aaa0d6574ee5143d6fec6e9af2bdf3252a2  popt-1.19-6.fc40.x86_64.rpm
+8a414572157d7e450eddcdc909521e09373289cc7a48ebc15f7b0c9922c17262  procps-ng-4.0.4-3.fc40.x86_64.rpm
+af85755cda79959a19161ebc26a45e507003298bd97b472b9ab0d512afa5e46a  protobuf-c-1.5.0-3.fc40.x86_64.rpm
+45ff2e9814aa059f323b23710c73309d41d36306667a3004f5fbb86b0cab4484  psmisc-23.6-6.fc40.x86_64.rpm
+cca50802d4f75306bc37126feb92db79fed44dcdabf76c1556853334995b9d3b  publicsuffix-list-dafsa-20240107-3.fc40.noarch.rpm
+a8111a574e98417b87d6a5613da029eed14c12a545d10d5ffaf95024ffeae4bd  python3-3.12.3-2.fc40.x86_64.rpm
+9a6d3854bf22c47f9b14981dbcc606ccd5ddda631b2feaae460239881306e2db  python3-libs-3.12.3-2.fc40.x86_64.rpm
+1cfc81c8761cd0381cc5020a3686afec8350aadea01998518e8aa2407419fe9f  python-pip-wheel-23.3.2-1.fc40.noarch.rpm
+ce44e24ec0c7c292fdec76b055a5e32320a51545e3bc3147c27ba9c418b6afc6  python-unversioned-command-3.12.3-2.fc40.noarch.rpm
+74f89e3304571c9d4eb8df444fa895aa71910dcb1909738c1f69781280da87e7  qemu-user-static-8.2.2-1.fc40.x86_64.rpm
+a40c17e5681b201891c6dfaed0f6fc0dba1cdb9eb208d9ff47f9be52de76d177  qemu-user-static-aarch64-8.2.2-1.fc40.x86_64.rpm
+fcf593362df5c9193264bf3bd74a6b25d73c1ef24cb7384b6f0bf4e36284365b  qemu-user-static-alpha-8.2.2-1.fc40.x86_64.rpm
+a241f91547dd638bfb15a1ac1c97baaaabb9b5bd64e40cd1ea444758233f119b  qemu-user-static-arm-8.2.2-1.fc40.x86_64.rpm
+f236b50236e4003b71eb293b769588d779fc68719f1562dd05a788b9f996a856  qemu-user-static-cris-8.2.2-1.fc40.x86_64.rpm
+b8250ea3b6ab5511ffb68f01aab0253de627c6e65f1bc8f61a1322d04390c1c1  qemu-user-static-hexagon-8.2.2-1.fc40.x86_64.rpm
+91f9eb36f2d9556058f320573b785775603c7c2bc31886ddfef1fd30b39f8893  qemu-user-static-hppa-8.2.2-1.fc40.x86_64.rpm
+689376c3a0f33907c88b619414bd8ea6cd5c09a1ad8f45f208c1a7b6f0f536b5  qemu-user-static-loongarch64-8.2.2-1.fc40.x86_64.rpm
+939ef3d38ee0c6a616879a5be56a42956cda3bc4a0e278343e06978ad1fd7feb  qemu-user-static-m68k-8.2.2-1.fc40.x86_64.rpm
+e3f3af44aa7ea424025872a34267354f9f28e463ef4fce4e96855724935f49ac  qemu-user-static-microblaze-8.2.2-1.fc40.x86_64.rpm
+2975de005d77b208c8acb01ec2b628f8ae72fa1ffca00ec4aa43ff75f29a1bca  qemu-user-static-mips-8.2.2-1.fc40.x86_64.rpm
+d095a53430ac1cedb2ea88a322ce8d01514d9deb4c5c187632954f48fe3ae518  qemu-user-static-nios2-8.2.2-1.fc40.x86_64.rpm
+fb1eb4db02470dd2ef9f7ae0a25a9418b281d2fd9d19094b5c5b7b70731efcd6  qemu-user-static-or1k-8.2.2-1.fc40.x86_64.rpm
+c81aa2cb89a3b5e939021c232c70176798480788a867773ba42a30805249483d  qemu-user-static-ppc-8.2.2-1.fc40.x86_64.rpm
+cb3cea7ef4e920cf4d1917c5e9f19bcc487357405e697e8a31eb2c21ae7cd961  qemu-user-static-riscv-8.2.2-1.fc40.x86_64.rpm
+17782c2c4cc9c647c40ae3208635ef7c6c31f1eab07e359597816e7517f24425  qemu-user-static-s390x-8.2.2-1.fc40.x86_64.rpm
+4d87a91ff166cd2a3af5420be4e668c716e4adb0dc1859e207455d5f03217257  qemu-user-static-sh4-8.2.2-1.fc40.x86_64.rpm
+d3f2ab7e3d249654b1f7dca507f81de64ea004c079f7c34858e12916c2f99db8  qemu-user-static-sparc-8.2.2-1.fc40.x86_64.rpm
+0111d6f799d20f1dca09b2a06f5c9510e8951bd5e56e3075c5802f17ed41a445  qemu-user-static-x86-8.2.2-1.fc40.x86_64.rpm
+fd2dec7911de16e5a076eb5b8be246ec2845481dbca49a16b52293eb42d3d1bd  qemu-user-static-xtensa-8.2.2-1.fc40.x86_64.rpm
+8d50fba416f81e4091b144748fff22665ee88699fdc4a372b905d999d05fd3e8  qrencode-libs-4.1.1-7.fc40.i686.rpm
+93781052576cc40a2c203bbc1bf865189a11b2c82436e614da9811baedc082fc  qrencode-libs-4.1.1-7.fc40.x86_64.rpm
+3527582fddcb54892228658b3929ffbb89766941a9794e726216e0800ac05721  readline-8.2-8.fc40.i686.rpm
+dacd59edbe4744fd9f6823d672e01eff89f871e88537554f16c0a275a17d04e9  readline-8.2-8.fc40.x86_64.rpm
+2fbe0a8f9925ba12b4307fbed8c5c148bab91835f1a3e8797ee08d94d2a0bf83  rpm-4.19.1.1-1.fc40.x86_64.rpm
+c48c149f4aebfe44d649eea6f7a8eaa229dc8db71ff70b66c7403aa9bd072820  rpm-libs-4.19.1.1-1.fc40.x86_64.rpm
+7bebda41ea91faf8cf8911a403c051eb59d444e60f8091d14d10987b713f39ff  rpm-plugin-audit-4.19.1.1-1.fc40.x86_64.rpm
+d400a4e4440bea56566fb1e9582d86d1ac2e07745d37fa6e71f43a8fea05217c  rpm-plugin-selinux-4.19.1.1-1.fc40.x86_64.rpm
+9aa5ca949c570a6519e50d6c75a951bb04fa5704129003a7ee2ea915c319cd31  rpm-sequoia-1.6.0-2.fc40.x86_64.rpm
+63af9d11e956f54577a54460afda4377d78fdb9e265b1eae3f0f7a6f94f70146  runc-1.1.12-3.fc40.x86_64.rpm
+3b940ff1f16fdb3ddcc19d7d76241c9b81d81099ff5147c4c9967d2c4ca6fb5b  sbsigntools-0.9.5-3.fc40.x86_64.rpm
+6a21b2c132a54fd6d9acb846d0a96289ab739b745cdc4c2b31bdbf6b2434a1a7  sed-4.9-1.fc40.x86_64.rpm
+b4835a7eb3bf2e2a9dd4e9546ba182997698f3e889a3d0ea1eadf541ad2607eb  selinux-policy-40.18-2.fc40.noarch.rpm
+cbf1da8c46e36e6990fec9da331c10dc6e8df83b732b3621e30aa5106c4ca934  selinux-policy-targeted-40.18-2.fc40.noarch.rpm
+89862f646cd64e81497f01a8b69ab30ac8968c47afef92a2c333608fdb90ccc1  setup-2.14.5-2.fc40.noarch.rpm
+14c4208826d1c859899f35978a80e0448fabead39f860fd3bae41b4e3e8e1883  shadow-utils-4.15.1-2.fc40.x86_64.rpm
+0a1e1e3502b65b8620cbcc74dfc75203fb9ce913f0580f49ed8fdcb8e89c106c  shadow-utils-subid-4.15.1-2.fc40.x86_64.rpm
+67eede27af5b4773eb2f7ac794df694be030310d40bce462864c05b8f65c87c3  socat-1.8.0.0-2.fc40.x86_64.rpm
+a1e23ae521e93ab19d3df77889a6a418c3432025e4880cfd893e40f7165876a7  sqlite-libs-3.45.1-2.fc40.x86_64.rpm
+bb0115e08518e9e439b62eda713dc8b94daaf0f2e5f840ee2162586ea44c88da  systemd-255.6-1.fc40.i686.rpm
+f602c28dfcd5b0148d88f8c86a32479afc9daefd08f5e5ce8b10f55aac976f09  systemd-255.6-1.fc40.x86_64.rpm
+f866e3bb336c0ea9180acfffa3222460c27ee884f54c7f731c0c5b7eef568de5  systemd-boot-unsigned-255.6-1.fc40.x86_64.rpm
+48e5fc1e7d55c84d2a0418cb2f6b57b16e841700dd858ff51c0ea997665f154a  systemd-libs-255.6-1.fc40.i686.rpm
+55cd520eb24dee8890482d9d8c7f3a434965656d38ad9dc60711ea5184ffbf3c  systemd-libs-255.6-1.fc40.x86_64.rpm
+2e750b7f4e584ddd38daec07f771dd6a312ec51438b4d2d370e2d4b5714f8860  systemd-networkd-255.6-1.fc40.x86_64.rpm
+e8bfc9f3fcd7a8e7013f4a2129fc1fa4a4f1bf0ee13ae9d9bc7804a1af864d0d  systemd-pam-255.6-1.fc40.i686.rpm
+27544b4c3606444491447225347d8419579f13cb1024aab321c76a7dc11f025e  systemd-pam-255.6-1.fc40.x86_64.rpm
+bac4dc6245600d6fa65e4e63b5340c7ec42268aa9c6fbbf8b4d7d742e86aec9a  systemd-resolved-255.6-1.fc40.x86_64.rpm
+f53b587ff73b3372f35470fd55aa9c97d2e163068f11b957a7f6e83dbfaa735d  systemd-udev-255.6-1.fc40.x86_64.rpm
+65819c502727dc293a71a74b9a5f6b0ba781f12a99c5d5535085f168e5eac56e  tar-1.35-3.fc40.x86_64.rpm
+0478e12152cc3432a31dfca5ddbc80966800af437c6d7c0b26be307d5e1272e7  tpm2-tools-5.7-1.fc40.x86_64.rpm
+f8f7d1b48e3a2193a9929544503c72d79c5de555816a3812f30158d136a2bf15  tpm2-tss-4.1.0-1.fc40.x86_64.rpm
+7da3dc1d28b8154f36e6c2e68ea7e5378729d9adfa48d9817bdacf8f309a43e2  tpm2-tss-fapi-4.1.0-1.fc40.x86_64.rpm
+0bd358e7dfb2bd730b62c7375c8d8f8d9e2470f085ca8dc4ec626dc0332d5687  tzdata-2024a-5.fc40.noarch.rpm
+f54615a1c38064a32e408765e5914d5dc2cbaec14cdf1b95fcf6800c3139b1f4  unbound-anchor-1.19.3-1.fc40.x86_64.rpm
+73a122907049f35648c590727f6d719aa1b4e3cb4987404f27ec9e4a1510be83  unbound-libs-1.19.3-1.fc40.x86_64.rpm
+36ffa617a0dfe523424a28290241a81cd51f7d82e776e58131f16d092d49797b  util-linux-2.40-0.9.rc1.fc40.i686.rpm
+41b777c50f1ec74795551c7d930a3d6eceab278ff03608893a5dbd49f2de5363  util-linux-2.40.1-1.fc40.x86_64.rpm
+7ec1b5df780c5a30f8e901179480125a6ea87f1f7bad3b69da7f4b351b88c3dd  util-linux-core-2.40-0.9.rc1.fc40.x86_64.rpm
+a00108f45cd60afffb9c1b5db8bef9c6fd5b3c233a546dde787efa5b4485e5b6  util-linux-core-2.40.1-1.fc40.x86_64.rpm
+22875117bc7b5d47f1edec6daa06e1c8d167b692c31954a28dcf5426eae12369  vim-common-9.1.393-1.fc40.x86_64.rpm
+3face3fce765d64b1112213f80ac36dcf6f1521d5b1cbdb6b3e50822ce9a8e24  vim-data-9.1.393-1.fc40.noarch.rpm
+1e9362eca139cee383318efa5818450768c5d44d063621d5600704aa05929149  vim-enhanced-9.1.393-1.fc40.x86_64.rpm
+3c57e0840dfd7073e5ac0a2d5ae240960bc593689ab027face333a3e76284c60  vim-filesystem-9.1.393-1.fc40.noarch.rpm
+30b11481b28e47cb568507ddaa4a9a2b67648f845859efb58e99e36801fd10d1  WALinuxAgent-udev-2.10.0.8-1.fc40.noarch.rpm
+21ecc005f54161fb5c88241f344bd0f00a19747911ea158872f00ca2ab91f238  wget2-2.1.0-8.fc40.x86_64.rpm
+d36fb4c83416b16df53c00501addd134a208c8596dd09aad9c4a4497ddedde83  wget2-libs-2.1.0-8.fc40.x86_64.rpm
+0b198f659f4ba8b00e8841c2fe6a75ff30dec1b194f8065046cafb11b85f93f7  wget2-wget-2.1.0-8.fc40.x86_64.rpm
+cf0306ceed1c6b3be39060d85f16b1953b464d3a625488b170d3b7aadf600645  which-2.21-41.fc40.x86_64.rpm
+4ede95a2fa3bc0ae617c8bf3a375b800163d58733b4829b15d9f038505d79fee  whois-nls-5.5.20-3.fc40.noarch.rpm
+e2195010e857f56b19246f8b821f9391922880b7691b3728a413f540edc890a6  xkeyboard-config-2.41-1.fc40.noarch.rpm
+7a455af0f845962e84ee327a32a26a369ba15f328400ad24c49d68e351ece175  xxd-9.1.393-1.fc40.x86_64.rpm
+ee599a1c4d7ee635e54ec137af4dded83f433b9c8a5976f75ecdcd000b5246e3  xz-5.4.6-3.fc40.x86_64.rpm
+b92ef78d8ab424c22130e457d0ef691d8197bff61c3b8852205d1b02baba3819  xz-libs-5.4.6-3.fc40.i686.rpm
+b6ee44b3d7e494b0364f26b7d0b169a8092180af787423cd5e8a47dc0f738a66  xz-libs-5.4.6-3.fc40.x86_64.rpm
+9e263e0a9b656178519de20733f3e0950fef494aa056daaa2004b522ba50b952  yajl-2.1.0-23.fc40.x86_64.rpm
+b51702fa6253036579b2b7fcc2f5146f589c4ee1ef759cf80c6c1730f2023ed7  zlib-ng-compat-2.1.6-2.fc40.i686.rpm
+02ed309305b380ed7ac270798e820e963dff51ba51200da30e6188193598178c  zlib-ng-compat-2.1.6-2.fc40.x86_64.rpm

image/mirror/dnf.conf

@@ -8,4 +8,4 @@ best=False
 skip_if_unavailable=True
 tsflags=nodocs
 basearch=x86_64
-releasever=38
+releasever=40

image/mirror/packages.txt

@@ -19,6 +19,7 @@ mokutil
 nano
 nano-default-editor
 nvme-cli
+passt-selinux
 passwd
 podman
 sbsigntools

image/mirror/update_packages.sh

@@ -39,7 +39,7 @@ download() {
   "${DNF5}" \
     "--config=${DNF_CONF}" \
     "--setopt=reposdir=${REPOSDIR}" \
-    "--releasever=38" \
+    "--releasever=40" \
     download \
     "--destdir=${OUTDIR}" \
     --resolve --alldeps \

image/system/mkosi.conf

@@ -1,6 +1,6 @@
 [Distribution]
 Distribution=fedora
-Release=38
+Release=40
 
 [Output]
 Format=disk

image/upload/internal/cmd/measurementsupload.go

@@ -61,7 +61,7 @@ func runMeasurementsUpload(cmd *cobra.Command, _ []string) error {
 	}
 	defer func() {
 		if err := uploadCClose(cmd.Context()); err != nil {
-			log.Error("closing upload client: %v", err)
+			log.Error("closing upload client", "error", err)
 		}
 	}()
 

internal/attestation/aws/snp/BUILD.bazel

@@ -18,7 +18,6 @@ go_library(
         "//internal/attestation/vtpm",
         "//internal/config",
         "@com_github_google_go_sev_guest//abi",
-        "@com_github_google_go_sev_guest//client",
         "@com_github_google_go_sev_guest//kds",
         "@com_github_google_go_sev_guest//proto/sevsnp",
         "@com_github_google_go_sev_guest//validate",

internal/attestation/aws/snp/issuer.go

@@ -21,7 +21,6 @@ import (
 	"github.com/edgelesssys/constellation/v2/internal/attestation/vtpm"
 
 	"github.com/google/go-sev-guest/abi"
-	sevclient "github.com/google/go-sev-guest/client"
 	"github.com/google/go-tpm-tools/client"
 	tpmclient "github.com/google/go-tpm-tools/client"
 )
@@ -70,13 +69,7 @@ func getInstanceInfo(_ context.Context, tpm io.ReadWriteCloser, _ []byte) ([]byt
 
 	akDigest := sha512.Sum512(encoded)
 
-	device, err := sevclient.OpenDevice()
-	if err != nil {
-		return nil, fmt.Errorf("opening sev device: %w", err)
-	}
-	defer device.Close()
-
-	report, certs, err := sevclient.GetRawExtendedReportAtVmpl(device, akDigest, 0)
+	report, certs, err := snp.GetExtendedReport(akDigest)
 	if err != nil {
 		return nil, fmt.Errorf("getting extended report: %w", err)
 	}

internal/attestation/aws/snp/validator.go

@@ -31,7 +31,7 @@ import (
 
 // Validator for AWS TPM attestation.
 type Validator struct {
-	// Embed variant to identify the Validator using varaint.OID().
+	// Embed variant to identify the Validator using variant.OID().
 	variant.AWSSEVSNP
 	// Embed validator to implement Validate method for aTLS handshake.
 	*vtpm.Validator

internal/attestation/azure/snp/validator_test.go

@@ -368,7 +368,7 @@ func TestTrustedKeyFromSNP(t *testing.T) {
 			),
 			wantErr: true,
 			assertion: func(assert *assert.Assertions, err error) {
-				assert.ErrorContains(err, "could not interpret VCEK DER bytes: x509: malformed certificate")
+				assert.ErrorContains(err, "x509: malformed certificate")
 			},
 		},
 		"invalid certchain fall back to embedded": {

internal/attestation/gcp/snp/BUILD.bazel

@@ -17,7 +17,6 @@ go_library(
         "//internal/attestation/vtpm",
         "//internal/config",
         "@com_github_google_go_sev_guest//abi",
-        "@com_github_google_go_sev_guest//client",
         "@com_github_google_go_sev_guest//kds",
         "@com_github_google_go_sev_guest//proto/sevsnp",
         "@com_github_google_go_sev_guest//validate",

internal/attestation/gcp/snp/issuer.go

@@ -21,7 +21,6 @@ import (
 	"github.com/edgelesssys/constellation/v2/internal/attestation/vtpm"
 
 	"github.com/google/go-sev-guest/abi"
-	sevclient "github.com/google/go-sev-guest/client"
 	"github.com/google/go-tpm-tools/client"
 	tpmclient "github.com/google/go-tpm-tools/client"
 	"github.com/google/go-tpm-tools/proto/attest"
@@ -65,13 +64,7 @@ func getInstanceInfo(_ context.Context, _ io.ReadWriteCloser, extraData []byte)
 	var extraData64 [64]byte
 	copy(extraData64[:], extraData)
 
-	device, err := sevclient.OpenDevice()
-	if err != nil {
-		return nil, fmt.Errorf("opening sev device: %w", err)
-	}
-	defer device.Close()
-
-	report, certs, err := sevclient.GetRawExtendedReportAtVmpl(device, extraData64, 0)
+	report, certs, err := snp.GetExtendedReport(extraData64)
 	if err != nil {
 		return nil, fmt.Errorf("getting extended report: %w", err)
 	}

internal/attestation/measurements/measurements_enterprise.go

@@ -19,14 +19,14 @@ package measurements
 
 // revive:disable:var-naming
 var (
-	aws_AWSNitroTPM          = M{0: {Expected: []byte{0x73, 0x7f, 0x76, 0x7a, 0x12, 0xf5, 0x4e, 0x70, 0xee, 0xcb, 0xc8, 0x68, 0x40, 0x11, 0x32, 0x3a, 0xe2, 0xfe, 0x2d, 0xd9, 0xf9, 0x07, 0x85, 0x57, 0x79, 0x69, 0xd7, 0xa2, 0x01, 0x3e, 0x8c, 0x12}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0x56, 0x59, 0x34, 0x21, 0x02, 0x90, 0x44, 0x09, 0x1e, 0xa3, 0xf4, 0xee, 0x2d, 0x37, 0x81, 0x0d, 0x7c, 0x61, 0xb0, 0xe0, 0x2f, 0x02, 0xc3, 0xb1, 0x62, 0x03, 0xcf, 0xcb, 0x6e, 0xe2, 0xc4, 0x16}, ValidationOpt: Enforce}, 6: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x23, 0x41, 0x35, 0x4c, 0xe6, 0xd4, 0xc2, 0x22, 0xac, 0x29, 0x22, 0x81, 0x0b, 0x7d, 0x47, 0x05, 0xff, 0xa2, 0x53, 0x7e, 0x2d, 0x70, 0xe4, 0x1c, 0x1d, 0x24, 0x9d, 0x76, 0x14, 0xd3, 0x44, 0x6e}, ValidationOpt: Enforce}, 11: {Expected: []byte{0x27, 0xb6, 0x56, 0xaf, 0xf7, 0xa1, 0x42, 0x72, 0xcb, 0x2d, 0x73, 0xa7, 0xe8, 0x91, 0xb7, 0x65, 0xe5, 0x1d, 0x6c, 0xd5, 0x96, 0xa8, 0xf1, 0x3d, 0x0a, 0xd2, 0x98, 0x0a, 0x82, 0x28, 0xd9, 0x18}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
-	aws_AWSSEVSNP            = M{0: {Expected: []byte{0x7b, 0x06, 0x8c, 0x0c, 0x3a, 0xc2, 0x9a, 0xfe, 0x26, 0x41, 0x34, 0x53, 0x6b, 0x9b, 0xe2, 0x6f, 0x1d, 0x4c, 0xcd, 0x57, 0x5b, 0x88, 0xd3, 0xc3, 0xce, 0xab, 0xf3, 0x6a, 0xc9, 0x9c, 0x02, 0x78}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0x20, 0xad, 0x2d, 0x6d, 0xa9, 0xf8, 0xe2, 0x0d, 0x29, 0x5a, 0x04, 0xa0, 0x3a, 0x12, 0xd2, 0x56, 0x23, 0x96, 0x92, 0x56, 0x4c, 0x6f, 0x84, 0xc8, 0x23, 0x62, 0x32, 0x0e, 0x0e, 0x10, 0x6e, 0xe0}, ValidationOpt: Enforce}, 6: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x43, 0x61, 0xcc, 0x73, 0x35, 0xbf, 0xf7, 0x9c, 0xad, 0x9b, 0xb2, 0x79, 0xd8, 0x79, 0xb3, 0x11, 0xba, 0x25, 0x86, 0x05, 0xcd, 0x42, 0x61, 0x2c, 0x83, 0x52, 0xfe, 0x94, 0x1a, 0x20, 0x88, 0x32}, ValidationOpt: Enforce}, 11: {Expected: []byte{0x47, 0x32, 0xad, 0xc8, 0x09, 0x1c, 0xb4, 0x48, 0xc3, 0x02, 0x5b, 0xfc, 0x25, 0x1b, 0xa3, 0x4f, 0x08, 0x87, 0x96, 0xa6, 0x35, 0x5f, 0xfe, 0x0f, 0x25, 0x12, 0xdc, 0xb4, 0x51, 0x82, 0x63, 0x4d}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
-	azure_AzureSEVSNP        = M{1: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0xfc, 0xe3, 0xcc, 0xa7, 0xbc, 0x7b, 0xb6, 0xad, 0x5c, 0x9f, 0xcb, 0x9a, 0x2c, 0x29, 0xda, 0xe6, 0x92, 0x47, 0x6f, 0x1e, 0x22, 0xfc, 0xb0, 0xe0, 0x1c, 0x97, 0x53, 0x8c, 0x94, 0x20, 0x29, 0xbf}, ValidationOpt: Enforce}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0xbb, 0x02, 0x30, 0x52, 0x12, 0x53, 0x7f, 0x41, 0x45, 0x9d, 0x90, 0xea, 0xf5, 0xd1, 0x45, 0xf2, 0xd5, 0x7b, 0x40, 0x4b, 0x2d, 0xbd, 0xdd, 0x36, 0x35, 0xa4, 0x0f, 0xc0, 0xc9, 0x24, 0x3e, 0x3d}, ValidationOpt: Enforce}, 11: {Expected: []byte{0xff, 0x83, 0xa5, 0x18, 0x84, 0xaa, 0x4f, 0x94, 0x3a, 0x34, 0x2a, 0xf8, 0x65, 0x3d, 0x4c, 0xab, 0xe6, 0x50, 0xf5, 0xce, 0xba, 0x38, 0x81, 0xcc, 0xd4, 0x57, 0xb4, 0xcd, 0x52, 0x27, 0xa5, 0x6d}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
-	azure_AzureTDX           = M{1: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0xc9, 0xf5, 0x25, 0x37, 0xb1, 0x53, 0xac, 0x42, 0xc1, 0xea, 0xba, 0x12, 0x02, 0xc4, 0xe8, 0xfc, 0xb1, 0x02, 0x4d, 0x25, 0x64, 0x84, 0xb0, 0x26, 0x2f, 0x9f, 0x20, 0x66, 0x3b, 0x6a, 0xa3, 0xdf}, ValidationOpt: Enforce}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x75, 0x85, 0xdc, 0xff, 0x32, 0x29, 0x12, 0xc0, 0x78, 0x25, 0xb3, 0x9b, 0x91, 0x17, 0xb4, 0x1b, 0x76, 0xad, 0xe5, 0x97, 0x07, 0x08, 0xd5, 0xbe, 0x26, 0x26, 0x67, 0x37, 0x6d, 0x9f, 0x9a, 0x00}, ValidationOpt: Enforce}, 11: {Expected: []byte{0x9d, 0xe2, 0x2b, 0x92, 0xf8, 0xba, 0xb8, 0xe2, 0x4f, 0x4d, 0xf1, 0xc3, 0x10, 0x42, 0x2d, 0xe1, 0x4b, 0x77, 0x43, 0x46, 0x2e, 0x02, 0x5e, 0xa1, 0xb7, 0x0e, 0x69, 0x85, 0x53, 0x49, 0x80, 0xd4}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
+	aws_AWSNitroTPM          = M{0: {Expected: []byte{0x73, 0x7f, 0x76, 0x7a, 0x12, 0xf5, 0x4e, 0x70, 0xee, 0xcb, 0xc8, 0x68, 0x40, 0x11, 0x32, 0x3a, 0xe2, 0xfe, 0x2d, 0xd9, 0xf9, 0x07, 0x85, 0x57, 0x79, 0x69, 0xd7, 0xa2, 0x01, 0x3e, 0x8c, 0x12}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0xeb, 0x8e, 0x4b, 0x76, 0x15, 0x6c, 0x67, 0x11, 0xf6, 0xd9, 0x0d, 0x5c, 0xeb, 0x20, 0xa3, 0x06, 0xa0, 0xb2, 0xb2, 0x13, 0x65, 0xd7, 0xc9, 0xd6, 0xe0, 0x16, 0xa0, 0x47, 0x63, 0x96, 0xee, 0xcb}, ValidationOpt: Enforce}, 6: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0xd4, 0x97, 0x54, 0xff, 0x13, 0xe3, 0x10, 0x8e, 0xca, 0x53, 0x0d, 0x71, 0xc5, 0x30, 0x56, 0x01, 0xea, 0xc4, 0x2a, 0x84, 0x1c, 0xaa, 0xe7, 0xce, 0xca, 0x64, 0xc3, 0x2a, 0x57, 0xda, 0xa7, 0x4e}, ValidationOpt: Enforce}, 11: {Expected: []byte{0xb5, 0x83, 0xdb, 0xc7, 0x94, 0x30, 0x61, 0x7f, 0x4e, 0x10, 0xf1, 0x55, 0x2a, 0xf8, 0x3f, 0x11, 0x98, 0xdc, 0x6c, 0xc5, 0x2a, 0xd8, 0xc0, 0xcf, 0x32, 0x34, 0x4a, 0xe6, 0xe7, 0x5d, 0xdd, 0xf9}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
+	aws_AWSSEVSNP            = M{0: {Expected: []byte{0x7b, 0x06, 0x8c, 0x0c, 0x3a, 0xc2, 0x9a, 0xfe, 0x26, 0x41, 0x34, 0x53, 0x6b, 0x9b, 0xe2, 0x6f, 0x1d, 0x4c, 0xcd, 0x57, 0x5b, 0x88, 0xd3, 0xc3, 0xce, 0xab, 0xf3, 0x6a, 0xc9, 0x9c, 0x02, 0x78}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0x6a, 0xd6, 0xb1, 0xf1, 0xcf, 0x72, 0xd9, 0x8c, 0x82, 0xe4, 0x3e, 0xfa, 0x00, 0x67, 0x90, 0x4f, 0xed, 0xbf, 0xca, 0xe1, 0xcd, 0x14, 0x8f, 0xd3, 0x24, 0x8d, 0x13, 0x7e, 0x37, 0xf4, 0x56, 0x5e}, ValidationOpt: Enforce}, 6: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x04, 0xcb, 0x57, 0x91, 0xe9, 0x39, 0x8c, 0xfd, 0x74, 0xc4, 0x0c, 0x3f, 0x12, 0x75, 0x6a, 0x6d, 0xc7, 0xc8, 0x55, 0xd9, 0xe5, 0xc3, 0x16, 0x02, 0xa6, 0xb9, 0xe9, 0xdb, 0xfe, 0x11, 0x9d, 0xef}, ValidationOpt: Enforce}, 11: {Expected: []byte{0x24, 0x9f, 0x2e, 0xfe, 0x68, 0x74, 0x95, 0x89, 0xf8, 0x15, 0x2a, 0x21, 0x78, 0xd4, 0x4a, 0x4a, 0xf0, 0x7b, 0xef, 0x06, 0x8c, 0x37, 0x2b, 0x49, 0x75, 0x22, 0x06, 0x24, 0xe9, 0xf4, 0x78, 0x79}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
+	azure_AzureSEVSNP        = M{1: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0x14, 0xa6, 0xcf, 0x42, 0x54, 0x1e, 0x1c, 0x78, 0x19, 0x7d, 0x2d, 0x07, 0x92, 0xdd, 0xd7, 0x7f, 0x3f, 0x6f, 0x1d, 0x4c, 0x7f, 0xe7, 0xf5, 0x8f, 0xec, 0x3a, 0x12, 0x12, 0x68, 0x2a, 0xf3, 0x68}, ValidationOpt: Enforce}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x30, 0x2b, 0xa1, 0xdb, 0x1f, 0xe0, 0x6f, 0x41, 0xb4, 0xad, 0x20, 0x44, 0x6d, 0x1a, 0x84, 0xbd, 0x27, 0xa5, 0x0c, 0x31, 0x4e, 0x74, 0xce, 0x9e, 0x2e, 0x8f, 0x88, 0x25, 0x0c, 0xa2, 0xdf, 0x97}, ValidationOpt: Enforce}, 11: {Expected: []byte{0xaa, 0x65, 0x0c, 0x81, 0x26, 0xeb, 0xd0, 0x6c, 0x5d, 0xfd, 0xe2, 0xeb, 0x82, 0x00, 0xac, 0x76, 0xfd, 0x7a, 0xa8, 0xfb, 0xb6, 0x1f, 0xf6, 0xbe, 0x09, 0x1e, 0x30, 0xc6, 0x7c, 0xdd, 0x1d, 0xfa}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
+	azure_AzureTDX           = M{1: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0x9f, 0xa3, 0xe7, 0x03, 0xfb, 0xa2, 0xaf, 0xc7, 0xf8, 0x11, 0x35, 0x61, 0x7f, 0x80, 0x60, 0xb2, 0x29, 0x4d, 0x56, 0x7c, 0xdf, 0x72, 0x52, 0xcb, 0x48, 0x23, 0x2b, 0xd6, 0x9e, 0x68, 0xf4, 0x91}, ValidationOpt: Enforce}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x8b, 0x4c, 0x15, 0xb8, 0x99, 0x1d, 0xf4, 0xad, 0xfa, 0x21, 0xf6, 0xe2, 0x48, 0xc7, 0xe4, 0x92, 0xc1, 0xd3, 0xf1, 0x2e, 0xee, 0x55, 0xb8, 0x99, 0xff, 0x53, 0xe5, 0x82, 0x65, 0x03, 0x8f, 0xb7}, ValidationOpt: Enforce}, 11: {Expected: []byte{0xbf, 0xfc, 0x1a, 0x54, 0x64, 0xa8, 0x35, 0xa2, 0xfa, 0x55, 0x5b, 0x9c, 0xea, 0x0a, 0x05, 0x7e, 0x7c, 0xeb, 0xe3, 0x7f, 0xbe, 0x98, 0x8e, 0xb5, 0xc3, 0xdc, 0xbf, 0x10, 0xcd, 0x1e, 0xcf, 0x04}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
 	azure_AzureTrustedLaunch M
-	gcp_GCPSEVES             = M{1: {Expected: []byte{0x36, 0x95, 0xdc, 0xc5, 0x5e, 0x3a, 0xa3, 0x40, 0x27, 0xc2, 0x77, 0x93, 0xc8, 0x5c, 0x72, 0x3c, 0x69, 0x7d, 0x70, 0x8c, 0x42, 0xd1, 0xf7, 0x3b, 0xd6, 0xfa, 0x4f, 0x26, 0x60, 0x8a, 0x5b, 0x24}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0x4f, 0x5d, 0x48, 0xaf, 0xc1, 0x07, 0xc3, 0x27, 0x3d, 0xd2, 0xec, 0x79, 0x59, 0x43, 0x4a, 0x04, 0x1d, 0x52, 0xd9, 0x4f, 0x8e, 0xbc, 0x04, 0x67, 0x9a, 0x7a, 0xf3, 0x69, 0xd6, 0x29, 0xb8, 0xe7}, ValidationOpt: Enforce}, 6: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x52, 0x46, 0xa7, 0xd7, 0x8d, 0xfd, 0x26, 0xcf, 0xb1, 0x44, 0xb3, 0x91, 0x27, 0xb4, 0x78, 0xc4, 0x75, 0xd0, 0xa0, 0x2f, 0xda, 0x30, 0x51, 0xb9, 0xa5, 0xae, 0x22, 0x80, 0x12, 0xd3, 0x05, 0x85}, ValidationOpt: Enforce}, 11: {Expected: []byte{0xd7, 0x58, 0x0b, 0x42, 0xf5, 0xc7, 0x76, 0xc5, 0x40, 0x0f, 0x11, 0xc9, 0x5c, 0xa0, 0xb1, 0xed, 0xa8, 0x36, 0x32, 0xd8, 0x73, 0x69, 0x33, 0xf7, 0x12, 0xfc, 0x04, 0xc4, 0x63, 0x61, 0x66, 0x53}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
-	gcp_GCPSEVSNP            = M{1: {Expected: []byte{0x36, 0x95, 0xdc, 0xc5, 0x5e, 0x3a, 0xa3, 0x40, 0x27, 0xc2, 0x77, 0x93, 0xc8, 0x5c, 0x72, 0x3c, 0x69, 0x7d, 0x70, 0x8c, 0x42, 0xd1, 0xf7, 0x3b, 0xd6, 0xfa, 0x4f, 0x26, 0x60, 0x8a, 0x5b, 0x24}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0xf0, 0xa7, 0x42, 0xe7, 0x1a, 0x57, 0xdc, 0x54, 0xac, 0x51, 0xb8, 0x22, 0xd4, 0x15, 0xf8, 0xdc, 0x24, 0xa0, 0x0b, 0xe4, 0x73, 0xc0, 0x73, 0x57, 0x98, 0x95, 0x75, 0x87, 0x8d, 0x2f, 0xbd, 0x56}, ValidationOpt: Enforce}, 6: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x8b, 0x20, 0x17, 0x19, 0x06, 0x1f, 0x92, 0x73, 0x60, 0x1a, 0x74, 0x39, 0x72, 0xd7, 0x48, 0xca, 0x88, 0xd0, 0x59, 0x32, 0xba, 0x6c, 0x36, 0x23, 0xce, 0xf1, 0xd9, 0xe8, 0xbc, 0xf2, 0xe6, 0x2c}, ValidationOpt: Enforce}, 11: {Expected: []byte{0x59, 0x6b, 0x0e, 0xd5, 0x58, 0xf7, 0x2d, 0x2e, 0x5c, 0xb3, 0x1a, 0x9f, 0x41, 0xe8, 0x17, 0x07, 0x30, 0xcd, 0x76, 0x0d, 0x63, 0xb8, 0x13, 0x2e, 0xe6, 0xcb, 0x40, 0xf0, 0xd6, 0x73, 0xef, 0x40}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
-	openstack_QEMUVTPM       = M{4: {Expected: []byte{0xaa, 0x36, 0x58, 0xb8, 0xe2, 0x8e, 0x07, 0x86, 0x65, 0x5a, 0xdf, 0x04, 0x3a, 0x04, 0x02, 0x81, 0x3d, 0x07, 0xb8, 0x91, 0x83, 0x5a, 0xd2, 0x38, 0x75, 0x8a, 0x30, 0x36, 0xee, 0x52, 0xce, 0x5e}, ValidationOpt: Enforce}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x2c, 0x92, 0x4d, 0x3b, 0x70, 0x10, 0xff, 0x4c, 0x8f, 0xf2, 0x8a, 0x55, 0x59, 0x8b, 0x26, 0x97, 0xf8, 0x21, 0x24, 0xce, 0x55, 0x0a, 0x35, 0xef, 0xc7, 0x8d, 0x9c, 0x7b, 0x89, 0xbb, 0xbc, 0x23}, ValidationOpt: Enforce}, 11: {Expected: []byte{0xe1, 0x56, 0x6d, 0xbc, 0x19, 0x27, 0x29, 0xd1, 0x80, 0xa9, 0xaa, 0x18, 0x6c, 0xa0, 0x5c, 0x3a, 0xb1, 0xd6, 0xb2, 0x52, 0xe3, 0x78, 0x47, 0x74, 0xe6, 0x91, 0x98, 0x8b, 0x1f, 0xd3, 0x54, 0xad}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
+	gcp_GCPSEVES             = M{1: {Expected: []byte{0x36, 0x95, 0xdc, 0xc5, 0x5e, 0x3a, 0xa3, 0x40, 0x27, 0xc2, 0x77, 0x93, 0xc8, 0x5c, 0x72, 0x3c, 0x69, 0x7d, 0x70, 0x8c, 0x42, 0xd1, 0xf7, 0x3b, 0xd6, 0xfa, 0x4f, 0x26, 0x60, 0x8a, 0x5b, 0x24}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0x24, 0x9d, 0xab, 0xa3, 0xd8, 0xc2, 0x96, 0xa0, 0xe1, 0xcd, 0x9a, 0xa7, 0x19, 0x6e, 0x36, 0x9f, 0x41, 0xe8, 0xd1, 0x1e, 0x80, 0xc0, 0x0c, 0x47, 0x71, 0xbe, 0x48, 0x75, 0xd3, 0x22, 0x60, 0x1e}, ValidationOpt: Enforce}, 6: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x26, 0xfc, 0xc9, 0xf2, 0x14, 0x80, 0xac, 0xad, 0x9a, 0x98, 0xcb, 0x06, 0x30, 0x73, 0x99, 0xe1, 0xad, 0x73, 0x7a, 0x49, 0x13, 0xd8, 0xc9, 0x39, 0x86, 0x13, 0x88, 0x8d, 0x94, 0x1f, 0xd2, 0x8a}, ValidationOpt: Enforce}, 11: {Expected: []byte{0xa4, 0xd3, 0xdd, 0xd7, 0xbc, 0xb0, 0xe3, 0x31, 0x3a, 0xdc, 0xc6, 0xb5, 0xea, 0xa0, 0x05, 0xc2, 0x98, 0x99, 0x30, 0x1d, 0x93, 0x6b, 0xe5, 0x9f, 0x74, 0x96, 0xbf, 0xc1, 0xab, 0x54, 0x73, 0x4a}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
+	gcp_GCPSEVSNP            = M{1: {Expected: []byte{0x36, 0x95, 0xdc, 0xc5, 0x5e, 0x3a, 0xa3, 0x40, 0x27, 0xc2, 0x77, 0x93, 0xc8, 0x5c, 0x72, 0x3c, 0x69, 0x7d, 0x70, 0x8c, 0x42, 0xd1, 0xf7, 0x3b, 0xd6, 0xfa, 0x4f, 0x26, 0x60, 0x8a, 0x5b, 0x24}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0x7e, 0xbf, 0xee, 0x6b, 0xc0, 0x69, 0x79, 0xb4, 0x9b, 0x98, 0x46, 0xab, 0xd7, 0xa8, 0xa6, 0x64, 0x4e, 0x38, 0x43, 0xac, 0x59, 0x1f, 0x77, 0x5f, 0x82, 0x2f, 0xdb, 0x1a, 0x1f, 0x96, 0x16, 0x90}, ValidationOpt: Enforce}, 6: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0xdf, 0x38, 0xa9, 0x47, 0x3d, 0xa9, 0xe2, 0x92, 0x64, 0xba, 0xbd, 0x55, 0x59, 0x02, 0xef, 0x30, 0x9d, 0x6a, 0x26, 0xfd, 0x12, 0x48, 0x08, 0xd3, 0x0d, 0x2c, 0x93, 0xd5, 0x7b, 0x84, 0xb2, 0x66}, ValidationOpt: Enforce}, 11: {Expected: []byte{0x28, 0x3e, 0x2d, 0x20, 0xe8, 0xe7, 0x08, 0x56, 0x5d, 0xa2, 0x48, 0xe3, 0x8b, 0x06, 0x05, 0xda, 0x6c, 0x3c, 0x84, 0xc1, 0x9d, 0x65, 0xd7, 0x7e, 0x07, 0xbb, 0xad, 0x81, 0x9c, 0x52, 0xeb, 0xe5}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
+	openstack_QEMUVTPM       = M{4: {Expected: []byte{0xd2, 0xa2, 0xb6, 0xca, 0xf1, 0xa0, 0xd9, 0xc8, 0xa7, 0x77, 0x62, 0x40, 0x05, 0x07, 0x0c, 0xd9, 0x03, 0x60, 0xf9, 0x49, 0x64, 0x9c, 0x41, 0x05, 0x2a, 0x39, 0x70, 0xa8, 0x1e, 0x4b, 0x75, 0x23}, ValidationOpt: Enforce}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0xce, 0x27, 0x47, 0xcd, 0x7c, 0xde, 0x75, 0x29, 0xc8, 0xb9, 0x58, 0x02, 0x57, 0x51, 0x79, 0x3d, 0xc4, 0xdd, 0x4f, 0x3b, 0x4a, 0x17, 0xa0, 0x8f, 0xab, 0x9e, 0x1a, 0x2c, 0xe6, 0x05, 0x3b, 0xce}, ValidationOpt: Enforce}, 11: {Expected: []byte{0xf5, 0xb0, 0xc2, 0xd3, 0x8b, 0x34, 0x36, 0x36, 0x7b, 0xc4, 0xfe, 0x9f, 0xd2, 0x1e, 0x51, 0x25, 0x65, 0x6e, 0x4b, 0x6c, 0x75, 0x20, 0x7e, 0x37, 0x0b, 0x8e, 0xa8, 0x61, 0xed, 0x7b, 0xa1, 0x09}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
 	qemu_QEMUTDX             M
-	qemu_QEMUVTPM            = M{4: {Expected: []byte{0xfc, 0x2c, 0xd1, 0x14, 0x27, 0xe6, 0x0c, 0xb0, 0x69, 0x96, 0xa9, 0x1d, 0x60, 0x07, 0x38, 0x97, 0x49, 0xcf, 0xd0, 0xb8, 0xea, 0x80, 0xdf, 0x38, 0x3b, 0x46, 0xb2, 0x12, 0xba, 0x85, 0x88, 0xe2}, ValidationOpt: Enforce}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x3c, 0xc6, 0xd0, 0xb9, 0xe5, 0x7a, 0x15, 0x22, 0x97, 0xaa, 0xf3, 0xc8, 0xbe, 0x02, 0x1d, 0x70, 0xed, 0xcc, 0xd1, 0x18, 0x8f, 0xd8, 0x02, 0x44, 0x9b, 0x82, 0x84, 0x17, 0xe7, 0x66, 0xd2, 0x3a}, ValidationOpt: Enforce}, 11: {Expected: []byte{0x35, 0xed, 0x01, 0x1d, 0x52, 0xf6, 0x5e, 0xa8, 0x89, 0xe4, 0xf5, 0x05, 0xb9, 0x1e, 0xd9, 0x2d, 0x85, 0x57, 0x85, 0x87, 0x72, 0xba, 0x5c, 0xf8, 0x19, 0x4a, 0x5b, 0x2c, 0x3c, 0x09, 0xca, 0x84}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
+	qemu_QEMUVTPM            = M{4: {Expected: []byte{0x71, 0x32, 0x79, 0xc6, 0xb9, 0x2c, 0xc0, 0x26, 0xbd, 0x07, 0x2a, 0xad, 0x10, 0x32, 0xcd, 0x3d, 0xb4, 0x77, 0xeb, 0xd1, 0xf8, 0x57, 0xd4, 0x34, 0x07, 0x71, 0xc5, 0x47, 0xb8, 0x87, 0xed, 0xf5}, ValidationOpt: Enforce}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0xa9, 0x90, 0xc8, 0xed, 0x25, 0x2b, 0x62, 0xd9, 0x0d, 0xee, 0x20, 0x15, 0x9f, 0xc0, 0xba, 0x4d, 0x69, 0xb0, 0xd7, 0x3c, 0x44, 0x60, 0x88, 0x5c, 0x80, 0x37, 0x8a, 0xcd, 0x78, 0xb6, 0x20, 0xcc}, ValidationOpt: Enforce}, 11: {Expected: []byte{0x2c, 0xad, 0x8b, 0xe5, 0xe5, 0xf7, 0x33, 0xd3, 0x32, 0xa3, 0xd4, 0x51, 0x49, 0xe5, 0x32, 0x0b, 0x24, 0x21, 0x7c, 0xef, 0x1e, 0xcb, 0x92, 0x4f, 0x30, 0xe7, 0x48, 0xf6, 0xce, 0x79, 0x2b, 0x93}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
 )

internal/attestation/snp/BUILD.bazel

@@ -9,6 +9,7 @@ go_library(
     deps = [
         "//internal/attestation",
         "@com_github_google_go_sev_guest//abi",
+        "@com_github_google_go_sev_guest//client",
         "@com_github_google_go_sev_guest//kds",
         "@com_github_google_go_sev_guest//proto/sevsnp",
         "@com_github_google_go_sev_guest//verify/trust",

internal/attestation/snp/snp.go

@@ -17,6 +17,7 @@ import (
 
 	"github.com/edgelesssys/constellation/v2/internal/attestation"
 	"github.com/google/go-sev-guest/abi"
+	"github.com/google/go-sev-guest/client"
 	"github.com/google/go-sev-guest/kds"
 	spb "github.com/google/go-sev-guest/proto/sevsnp"
 	"github.com/google/go-sev-guest/verify/trust"
@@ -32,6 +33,26 @@ func Product() *spb.SevProduct {
 	return &spb.SevProduct{Name: spb.SevProduct_SEV_PRODUCT_MILAN, Stepping: 0} // Milan-B0
 }
 
+// GetExtendedReport retrieves the extended SNP report from the CVM.
+func GetExtendedReport(reportData [64]byte) (report, certChain []byte, err error) {
+	qp, err := client.GetLeveledQuoteProvider()
+	if err != nil {
+		return nil, nil, fmt.Errorf("getting quote provider: %w", err)
+	}
+	quote, err := qp.GetRawQuoteAtLevel(reportData, 0)
+	if err != nil {
+		return nil, nil, fmt.Errorf("getting extended report: %w", err)
+	}
+
+	// Parse the report and certificate chain from the quote.
+	report = quote
+	if len(quote) > abi.ReportSize {
+		report = quote[:abi.ReportSize]
+		certChain = quote[abi.ReportSize:]
+	}
+	return report, certChain, nil
+}
+
 // InstanceInfo contains the necessary information to establish trust in a SNP CVM.
 type InstanceInfo struct {
 	// ReportSigner is the PEM-encoded certificate used to validate the attestation report's signature.
@@ -110,7 +131,7 @@ func (a *InstanceInfo) AttestationWithCerts(getter trust.HTTPSGetter,
 		return nil, fmt.Errorf("converting report to proto: %w", err)
 	}
 
-	productName := kds.ProductString(Product())
+	productName := kds.ProductLine(Product())
 
 	att := &spb.Attestation{
 		Report:           report,

internal/cloud/azure/BUILD.bazel

@@ -7,6 +7,8 @@ go_library(
         "azure.go",
         "imds.go",
         "interface.go",
+        "iptables_cross.go",
+        "iptables_linux.go",
     ],
     importpath = "github.com/edgelesssys/constellation/v2/internal/cloud/azure",
     visibility = ["//:__subpackages__"],
@@ -20,9 +22,17 @@ go_library(
         "@com_github_azure_azure_sdk_for_go_sdk_azidentity//:azidentity",
         "@com_github_azure_azure_sdk_for_go_sdk_resourcemanager_compute_armcompute_v5//:armcompute",
         "@com_github_azure_azure_sdk_for_go_sdk_resourcemanager_network_armnetwork_v5//:armnetwork",
-        "@io_k8s_kubernetes//pkg/util/iptables",
-        "@io_k8s_utils//exec",
-    ],
+    ] + select({
+        "@io_bazel_rules_go//go/platform:android": [
+            "@io_k8s_kubernetes//pkg/util/iptables",
+            "@io_k8s_utils//exec",
+        ],
+        "@io_bazel_rules_go//go/platform:linux": [
+            "@io_k8s_kubernetes//pkg/util/iptables",
+            "@io_k8s_utils//exec",
+        ],
+        "//conditions:default": [],
+    }),
 )
 
 go_test(

internal/cloud/azure/azure.go

@@ -19,7 +19,6 @@ import (
 	"context"
 	"errors"
 	"fmt"
-	"log/slog"
 	"path"
 	"strconv"
 
@@ -31,8 +30,6 @@ import (
 	"github.com/edgelesssys/constellation/v2/internal/cloud/metadata"
 	"github.com/edgelesssys/constellation/v2/internal/constants"
 	"github.com/edgelesssys/constellation/v2/internal/role"
-	"k8s.io/kubernetes/pkg/util/iptables"
-	"k8s.io/utils/exec"
 )
 
 // Cloud provides Azure metadata and API access.
@@ -439,68 +436,6 @@ func (c *Cloud) getLoadBalancerDNSName(ctx context.Context) (string, error) {
 }
 */
 
-// PrepareControlPlaneNode sets up iptables for the control plane node only
-// if an internal load balancer is used.
-//
-// This is needed since during `kubeadm init` the API server must talk to the
-// kubeAPIEndpoint, which is the load balancer IP address. During that time, the
-// only healthy VM is the VM itself. Therefore, traffic is sent to the load balancer
-// and the 5-tuple is (VM IP, <some port>, LB IP, 6443, TCP).
-// Now the load balancer does not re-write the source IP address only the destination (DNAT).
-// Therefore the 5-tuple is (VM IP, <some port>, VM IP, 6443, TCP).
-// Now the VM responds to the SYN packet with a SYN-ACK packet, but the outgoing
-// connection waits on a response from the load balancer and not the VM therefore
-// dropping the packet.
-//
-// OpenShift also uses the same mechanism to redirect traffic to the API server:
-// https://github.com/openshift/machine-config-operator/blob/e453bd20bac0e48afa74e9a27665abaf454d93cd/templates/master/00-master/azure/files/opt-libexec-openshift-azure-routes-sh.yaml
-func (c *Cloud) PrepareControlPlaneNode(ctx context.Context, log *slog.Logger) error {
-	selfMetadata, err := c.Self(ctx)
-	if err != nil {
-		return fmt.Errorf("failed to get self metadata: %w", err)
-	}
-
-	// skipping iptables setup for worker nodes
-	if selfMetadata.Role != role.ControlPlane {
-		log.Info("not a control plane node, skipping iptables setup")
-		return nil
-	}
-
-	// skipping iptables setup if no internal LB exists e.g.
-	// for public LB architectures
-	loadbalancerIP, err := c.getLoadBalancerPrivateIP(ctx)
-	if err != nil {
-		log.With(slog.Any("error", err)).Warn("skipping iptables setup, failed to get load balancer private IP")
-		return nil
-	}
-
-	log.Info(fmt.Sprintf("Setting up iptables for control plane node with load balancer IP %s", loadbalancerIP))
-
-	iptablesExec := iptables.New(exec.New(), iptables.ProtocolIPv4)
-	if err != nil {
-		return fmt.Errorf("failed to create iptables client: %w", err)
-	}
-
-	const chainName = "azure-lb-nat"
-	if _, err := iptablesExec.EnsureChain(iptables.TableNAT, chainName); err != nil {
-		return fmt.Errorf("failed to create iptables chain: %w", err)
-	}
-
-	if _, err := iptablesExec.EnsureRule(iptables.Append, iptables.TableNAT, "PREROUTING", "-j", chainName); err != nil {
-		return fmt.Errorf("failed to add rule to iptables chain: %w", err)
-	}
-
-	if _, err := iptablesExec.EnsureRule(iptables.Append, iptables.TableNAT, "OUTPUT", "-j", chainName); err != nil {
-		return fmt.Errorf("failed to add rule to iptables chain: %w", err)
-	}
-
-	if _, err := iptablesExec.EnsureRule(iptables.Append, iptables.TableNAT, chainName, "--dst", loadbalancerIP, "-p", "tcp", "--dport", "6443", "-j", "REDIRECT"); err != nil {
-		return fmt.Errorf("failed to add rule to iptables chain: %w", err)
-	}
-
-	return nil
-}
-
 // convertToInstanceMetadata converts a armcomputev2.VirtualMachineScaleSetVM to a metadata.InstanceMetadata.
 func convertToInstanceMetadata(vm armcompute.VirtualMachineScaleSetVM, networkInterfaces []armnetwork.Interface,
 ) (metadata.InstanceMetadata, error) {

internal/cloud/azure/iptables_cross.go

@@ -0,0 +1,18 @@
+//go:build !linux
+
+/*
+Copyright (c) Edgeless Systems GmbH
+
+SPDX-License-Identifier: AGPL-3.0-only
+*/
+
+package azure
+
+import (
+	"context"
+	"log/slog"
+)
+
+func (c *Cloud) PrepareControlPlaneNode(_ context.Context, _ *slog.Logger) error {
+	panic("azure.*Cloud.PrepareControlPlaneNode is only supported on Linux")
+}

internal/cloud/azure/iptables_linux.go

@@ -0,0 +1,77 @@
+//go:build linux
+
+/*
+Copyright (c) Edgeless Systems GmbH
+
+SPDX-License-Identifier: AGPL-3.0-only
+*/
+
+package azure
+
+import (
+	"context"
+	"fmt"
+	"log/slog"
+
+	"github.com/edgelesssys/constellation/v2/internal/role"
+	"k8s.io/kubernetes/pkg/util/iptables"
+	"k8s.io/utils/exec"
+)
+
+// PrepareControlPlaneNode sets up iptables for the control plane node only
+// if an internal load balancer is used.
+//
+// This is needed since during `kubeadm init` the API server must talk to the
+// kubeAPIEndpoint, which is the load balancer IP address. During that time, the
+// only healthy VM is the VM itself. Therefore, traffic is sent to the load balancer
+// and the 5-tuple is (VM IP, <some port>, LB IP, 6443, TCP).
+// Now the load balancer does not re-write the source IP address only the destination (DNAT).
+// Therefore the 5-tuple is (VM IP, <some port>, VM IP, 6443, TCP).
+// Now the VM responds to the SYN packet with a SYN-ACK packet, but the outgoing
+// connection waits on a response from the load balancer and not the VM therefore
+// dropping the packet.
+//
+// OpenShift also uses the same mechanism to redirect traffic to the API server:
+// https://github.com/openshift/machine-config-operator/blob/e453bd20bac0e48afa74e9a27665abaf454d93cd/templates/master/00-master/azure/files/opt-libexec-openshift-azure-routes-sh.yaml
+func (c *Cloud) PrepareControlPlaneNode(ctx context.Context, log *slog.Logger) error {
+	selfMetadata, err := c.Self(ctx)
+	if err != nil {
+		return fmt.Errorf("failed to get self metadata: %w", err)
+	}
+
+	// skipping iptables setup for worker nodes
+	if selfMetadata.Role != role.ControlPlane {
+		log.Info("not a control plane node, skipping iptables setup")
+		return nil
+	}
+
+	// skipping iptables setup if no internal LB exists e.g.
+	// for public LB architectures
+	loadbalancerIP, err := c.getLoadBalancerPrivateIP(ctx)
+	if err != nil {
+		log.With(slog.Any("error", err)).Warn("skipping iptables setup, failed to get load balancer private IP")
+		return nil
+	}
+
+	log.Info(fmt.Sprintf("Setting up iptables for control plane node with load balancer IP %s", loadbalancerIP))
+	iptablesExec := iptables.New(exec.New(), iptables.ProtocolIPv4)
+
+	const chainName = "azure-lb-nat"
+	if _, err := iptablesExec.EnsureChain(iptables.TableNAT, chainName); err != nil {
+		return fmt.Errorf("failed to create iptables chain: %w", err)
+	}
+
+	if _, err := iptablesExec.EnsureRule(iptables.Append, iptables.TableNAT, "PREROUTING", "-j", chainName); err != nil {
+		return fmt.Errorf("failed to add rule to iptables chain: %w", err)
+	}
+
+	if _, err := iptablesExec.EnsureRule(iptables.Append, iptables.TableNAT, "OUTPUT", "-j", chainName); err != nil {
+		return fmt.Errorf("failed to add rule to iptables chain: %w", err)
+	}
+
+	if _, err := iptablesExec.EnsureRule(iptables.Append, iptables.TableNAT, chainName, "--dst", loadbalancerIP, "-p", "tcp", "--dport", "6443", "-j", "REDIRECT"); err != nil {
+		return fmt.Errorf("failed to add rule to iptables chain: %w", err)
+	}
+
+	return nil
+}

internal/config/image_enterprise.go

@@ -10,5 +10,5 @@ package config
 
 const (
 	// defaultImage is the default image to use.
-	defaultImage = "ref/main/stream/nightly/v2.17.0-pre.0.20240502082051-3d2a023ccf5d"
+	defaultImage = "ref/main/stream/nightly/v2.17.0-pre.0.20240514160230-8219005587c8"
 )

internal/constellation/applyinit.go

@@ -90,7 +90,7 @@ func (a *Applier) Init(
 	}
 
 	// Perform the RPC
-	a.log.Debug("Initialization call", "endpoint", doer.endpoint, "kmsURI", doer.req.KmsUri, "storageURI", doer.req.StorageUri)
+	a.log.Debug("Initialization call", "endpoint", doer.endpoint)
 	a.spinner.Start("Connecting ", false)
 	retrier := retry.NewIntervalRetrier(doer, 30*time.Second, serviceIsUnavailable)
 	if err := retrier.Do(ctx); err != nil {

internal/verify/verify.go

@@ -131,7 +131,7 @@ func getCertChain(cfg config.AttestationCfg) ([]byte, error) {
 	}
 
 	if awsCfg.AMDSigningKey.Equal(config.Certificate{}) {
-		certs, err := trust.GetProductChain(kds.ProductString(snp.Product()), abi.VlekReportSigner, trust.DefaultHTTPSGetter())
+		certs, err := trust.GetProductChain(kds.ProductLine(snp.Product()), abi.VlekReportSigner, trust.DefaultHTTPSGetter())
 		if err != nil {
 			return nil, fmt.Errorf("getting product certificate chain: %w", err)
 		}

internal/versions/versions.go

@@ -173,11 +173,11 @@ const (
 	// NodeMaintenanceOperatorImage is the image for the node maintenance operator.
 	NodeMaintenanceOperatorImage = "quay.io/medik8s/node-maintenance-operator:v0.15.0@sha256:8cb8dad93283268282c30e75c68f4bd76b28def4b68b563d2f9db9c74225d634" // renovate:container
 	// LogstashImage is the container image of logstash, used for log collection by debugd.
-	LogstashImage = "ghcr.io/edgelesssys/constellation/logstash-debugd:v2.15.0-pre.0.20231220180720-ced03202a944@sha256:54e0beb2fad83509c1d79c866652bdd94125ce5a4c9947be8c63cd74a2079e70" // renovate:container
+	LogstashImage = "ghcr.io/edgelesssys/constellation/logstash-debugd:v2.17.0-pre.0.20240513104207-d76c9ac82de7@sha256:e7d77bea381354c58fd9783eb9e2b846b14ea846d531eb3c54d5dd89917908c4" // renovate:container
 	// FilebeatImage is the container image of filebeat, used for log collection by debugd.
-	FilebeatImage = "ghcr.io/edgelesssys/constellation/filebeat-debugd:v2.15.0-pre.0.20231220180720-ced03202a944@sha256:1a57ad12dd0d1a7514f2360f37108925e103e7d0e5b8f24b12e8f266b78d570e" // renovate:container
+	FilebeatImage = "ghcr.io/edgelesssys/constellation/filebeat-debugd:v2.17.0-pre.0.20240513104207-d76c9ac82de7@sha256:6567d682385c06b49f6d56fdf3f20d5c24809bbfced15b816f4717bf837fc776" // renovate:container
 	// MetricbeatImage is the container image of filebeat, used for log collection by debugd.
-	MetricbeatImage = "ghcr.io/edgelesssys/constellation/metricbeat-debugd:v2.15.0-pre.0.20231220180720-ced03202a944@sha256:60bdd7cd868841385da230d4eab4600235b22fe1b3e0e865dda3f9720534ea7e" // renovate:container
+	MetricbeatImage = "ghcr.io/edgelesssys/constellation/metricbeat-debugd:v2.17.0-pre.0.20240513104207-d76c9ac82de7@sha256:d16fe0371fbb383ca3cfa70d4d10ea5124fd87054bfac189ce5458ba350bb25d" // renovate:container
 
 	// currently supported versions.
 	//nolint:revive

renovate.json5

@@ -57,6 +57,21 @@
         "rollback",
       ],
     },
+    {
+      // Group update of Terraform dependencies.
+      "groupName": "Terraform dependencies",
+      "matchManagers": ["terraform"],
+      "matchUpdateTypes": [
+        "bump",
+        "digest",
+        "lockFileMaintenance",
+        "minor",
+        "patch",
+        "pin",
+        "pinDigest",
+        "rollback",
+      ],
+    },
     {
       "matchManagers": ["bazelisk", "bazel", "bazel-module"],
       "matchDepNames": ["bazel", "io_bazel_rules_go", "bazel_gazelle"],

s3proxy/deploy/s3proxy/values.yaml

@@ -3,7 +3,7 @@ awsAccessKeyID: "replaceme"
 awsSecretAccessKey: "replaceme"
 
 # Pod image to deploy.
-image: "ghcr.io/edgelesssys/constellation/s3proxy:v2.16.0-pre.0.20240221184016-522f2858c6ef"
+image: "ghcr.io/edgelesssys/constellation/s3proxy:v2.17.0"
 
 # Control if multipart uploads are blocked.
 allowMultipart: false