mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-12-29 09:26:17 -05:00
c7d12055d1
* config: move AMD root key to global constant * attestation: add SNP based attestation for aws * Always enable SNP, regardless of attestation type. * Make AWSNitroTPM default again There exists a bug in AWS SNP implementation where sometimes a host might not be able to produce valid SNP reports. Since we have to wait for AWS to fix this we are merging SNP attestation as opt-in feature.
52 lines
1.6 KiB
Python
52 lines
1.6 KiB
Python
load("@io_bazel_rules_go//go:def.bzl", "go_library")
|
|
load("//bazel/go:go_test.bzl", "go_test")
|
|
|
|
go_library(
|
|
name = "vtpm",
|
|
srcs = [
|
|
"attestation.go",
|
|
"vtpm.go",
|
|
],
|
|
importpath = "github.com/edgelesssys/constellation/v2/internal/attestation/vtpm",
|
|
visibility = ["//:__subpackages__"],
|
|
deps = [
|
|
"//internal/attestation",
|
|
"//internal/attestation/measurements",
|
|
"@com_github_google_go_tpm//tpm2",
|
|
"@com_github_google_go_tpm_tools//client",
|
|
"@com_github_google_go_tpm_tools//proto/attest",
|
|
"@com_github_google_go_tpm_tools//proto/tpm",
|
|
"@com_github_google_go_tpm_tools//server",
|
|
"@org_golang_google_protobuf//encoding/protojson",
|
|
],
|
|
)
|
|
|
|
go_test(
|
|
name = "vtpm_test",
|
|
srcs = [
|
|
"attestation_test.go",
|
|
"vtpm_test.go",
|
|
],
|
|
data = glob(["testdata/**"]),
|
|
embed = [":vtpm"],
|
|
# keep
|
|
gotags = select({
|
|
"//bazel/settings:tpm_simulator_enabled": [],
|
|
"//conditions:default": ["disable_tpm_simulator"],
|
|
}),
|
|
deps = [
|
|
"//internal/attestation/initialize",
|
|
"//internal/attestation/measurements",
|
|
"//internal/attestation/simulator",
|
|
"//internal/logger",
|
|
"@com_github_google_go_sev_guest//proto/sevsnp",
|
|
"@com_github_google_go_tpm//tpm2",
|
|
"@com_github_google_go_tpm_tools//client",
|
|
"@com_github_google_go_tpm_tools//proto/attest",
|
|
"@com_github_google_go_tpm_tools//proto/tpm",
|
|
"@com_github_stretchr_testify//assert",
|
|
"@com_github_stretchr_testify//require",
|
|
"@org_uber_go_goleak//:goleak",
|
|
],
|
|
)
|