Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2024-10-01 01:36:09 -04:00
Code Issues Packages Projects Releases Wiki Activity
916e5d6b55
constellation/hack/qemu-metadata-api
History
Daniel Weiße 4be29b04dc AB#1915 Local PCR calculation (#243) 
* Add QEMU cloud-logging

* Add QEMU metadata endpoints to collect logs during cluster boot

* Send PCRs to QEMU metadata if boot fails on Azure or GCP

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2022-07-04 12:59:43 +02:00
..
server AB#1915 Local PCR calculation (#243) 2022-07-04 12:59:43 +02:00
virtwrapper AB#2114 Add QEMU metadata API (#237) 2022-06-30 11:14:26 +02:00
Dockerfile AB#2114 Add QEMU metadata API (#237) 2022-06-30 11:14:26 +02:00
main.go AB#1915 Local PCR calculation (#243) 2022-07-04 12:59:43 +02:00
README.md AB#2114 Add QEMU metadata API (#237) 2022-06-30 11:14:26 +02:00

README.md

QEMU metadata API

This program provides a metadata API for Constellation on QEMU.

Dependencies

To interact with QEMU libvirt is required. Install the C libraries:

On Ubuntu:

sudo apt install libvirt-dev

On Fedora:

sudo dnf install libvirt-devel

Firewalld

If your system uses firewalld virtmanager will add itself to the firewall rules managed by firewalld. Your VMs might be unable to communicate with the host.

To fix this open port 8080 (the default port for the QEMU metadata API) for the libvirt zone:

# Open the port
sudo firewall-cmd --zone libvirt --add-port 8080/tcp --permanent

Docker image

Build the image:

DOCKER_BUILDKIT=1 docker build -t ghcr.io/edgelesssys/constellation/qemu-metadata-api:latest -f hack/qemu-metadata-api/Dockerfile .

A container of the image is automatically started by Terraform. You can also run the image manually using the following command:

docker run -it --rm \
    --network host \
    -v /var/run/libvirt/libvirt-sock:/var/run/libvirt/libvirt-sock \
    ghcr.io/edgelesssys/constellation/qemu-metadata-api:latest