Support in-house test igvm agent for VMM HyeprV tests

[mingweishih]

This PR refactors the test igvm agent code from the test GED into a separate crate and introduce Windows-style RPC server that is built on top of it. The RPC server allows us to test the attestation flow in the VMM HyperV tests.

[github-actions]

⚠️ Unsafe Code Detected

This PR modifies files containing unsafe Rust code. Extra scrutiny is required during review.

For more on why we check whole files, instead of just diffs, check out the Rustonomicon

[Copilot]

Pull request overview

This PR refactors the test IGVM agent code from the guest_emulation_device into a standalone library (test_igvm_agent_lib) and introduces a Windows RPC server (test_igvm_agent_rpc_server) to enable attestation flow testing in VMM Hyper-V tests. The RPC server implements the IGVM Agent RPC interface using Windows MIDL-generated stubs.

Key Changes:

• Extracted test IGVM agent logic into reusable test_igvm_agent_lib crate
• Created Windows RPC server for host-side attestation testing
• Updated VMM tests to spawn and manage the RPC server during CVM TPM tests

Reviewed changes

Copilot reviewed 24 out of 25 changed files in this pull request and generated 9 comments.

Show a summary per file

File	Description
vmm_tests/vmm_tests/tests/tests/x86_64/tpm.rs	Adds RPC server spawning and lifecycle management to CVM TPM tests
vmm_tests/petri_artifacts_vmm_test/src/lib.rs	Declares new test_igvm_agent_rpc_server artifact
vmm_tests/petri_artifact_resolver_openvmm_known_paths/src/lib.rs	Adds path resolution for RPC server executable
vm/devices/get/test_igvm_agent_rpc_server/src/rpc/server.rs	Implements Windows RPC server with console signal handling
vm/devices/get/test_igvm_agent_rpc_server/src/rpc/mod.rs	Module declaration for RPC server components
vm/devices/get/test_igvm_agent_rpc_server/src/rpc/igvm_agent.rs	Singleton facade exposing test agent through global instance
vm/devices/get/test_igvm_agent_rpc_server/src/rpc/handlers.rs	RPC method handlers and MIDL memory allocators
vm/devices/get/test_igvm_agent_rpc_server/src/main.rs	Entry point for standalone RPC server executable
vm/devices/get/test_igvm_agent_rpc_server/idl/IGVmAgentRpcApi.idl	MIDL interface definition for IGVM Agent RPC API
vm/devices/get/test_igvm_agent_rpc_server/build.rs	Build script for MIDL compilation and cross-compilation support
vm/devices/get/test_igvm_agent_rpc_server/Cargo.toml	Dependencies and build configuration for RPC server
vm/devices/get/test_igvm_agent_lib/src/test_crypto.rs	Minor import formatting change
vm/devices/get/test_igvm_agent_lib/src/lib.rs	Refactored library with public APIs and updated synchronization
vm/devices/get/guest_emulation_device/src/lib.rs	Removes inline agent code, now uses test_igvm_agent_lib
vm/devices/get/guest_emulation_device/Cargo.toml	Removes test_igvm_agent feature, adds lib dependency
openvmm/openvmm_resources/Cargo.toml	Removes test_igvm_agent feature flag
openhcl/underhill_attestation/Cargo.toml	Removes test_igvm_agent feature flag
flowey/flowey_lib_hvlite/src/lib.rs	Exports new build module
flowey/flowey_lib_hvlite/src/init_vmm_tests_env.rs	Registers RPC server in test environment
flowey/flowey_lib_hvlite/src/build_test_igvm_agent_rpc_server.rs	Build flow node for RPC server with static CRT linking
flowey/flowey_lib_hvlite/src/_jobs/local_build_and_run_nextest_vmm_tests.rs	Integrates RPC server into local test builds
flowey/flowey_lib_hvlite/src/_jobs/consume_and_test_nextest_vmm_tests_archive.rs	Adds RPC server to artifact dependencies
flowey/flowey_hvlite/src/pipelines/checkin_gates.rs	Publishes RPC server artifacts in CI pipeline
Cargo.toml	Adds workspace dependencies for new crates
Cargo.lock	Updates lock file with new dependencies

Comments suppressed due to low confidence (4)

vm/devices/get/test_igvm_agent_lib/src/test_crypto.rs:16

• The import statement was split across two lines. While this is valid, the original single-line import use sha2::digest::consts::{U20, U64}; was more concise and easier to read. The split doesn't improve readability and adds an extra line without clear benefit.
  vm/devices/get/test_igvm_agent_lib/src/lib.rs:108
• The new plan_installed field is added to track whether a plan has been installed, but the existing code had a Once synchronization primitive (line removed) that ensured thread-safe one-time initialization across all instances. The new approach only prevents multiple installations per instance, not globally. If multiple TestIgvmAgent instances are created and share state through the singleton pattern in test_igvm_agent_rpc_server/src/rpc/igvm_agent.rs, this could lead to race conditions or unexpected behavior. Consider whether thread-safety across instances is still required.
  vm/devices/get/test_igvm_agent_lib/src/lib.rs:217
• The doc comment "Request handler." is too minimal for a public API function. It should describe what the function does, what the input bytes represent, what the return tuple contains (payload and expected length), and what errors can occur.
  vm/devices/get/test_igvm_agent_lib/src/lib.rs:451
• The initialize_keys, generate_mock_wrapped_key_response, generate_mock_key_release_response, and generate_jwt_with_rsa_key functions were changed from pub(crate) to fn (private). This is correct since they are internal implementation details. However, this is inconsistent with the change description which says the code was "refactored...into a separate crate" - typically when refactoring into a library crate, you'd expect more items to become public to support different consumers, not fewer. Verify that all necessary APIs are exposed for the RPC server to function correctly.

[github-actions]

At least one Petri test failed.

[github-actions]

At least one Petri test failed.

[github-actions]

At least one Petri test failed.

[github-actions]

At least one Petri test failed.

[github-actions]

At least one Petri test failed.

[Copilot]

Pull request overview

Copilot reviewed 30 out of 31 changed files in this pull request and generated 3 comments.

[github-actions]

At least one Petri test failed.

[github-actions]

At least one Petri test failed.

[smalis-msft]

This should probably get moved to a new crate, rather than living next to the tests. Something like vmm_test_igvm_agent or something in thie vmm_tests folder.

[mingweishih]

After several tries, I found that we cannot easily avoid race conditions with nextest framework if we manage the server within the test where one test starts the server (that is registered as Windows RPC server with hard-coded namespace) and the others depend on it. That is, we cannot guarantee the server is running until all the other tests finish. As result, I moved this as part of flowey that is much cleaner IMO. Now we have only simple functions to check existence of the server here. Do you think we still need to put them into a separate file.

[github-actions]

At least one Petri test failed.

[github-actions]

At least one Petri test failed.

[github-actions]

At least one Petri test failed.