Remote attestation with PCRs and AMD SEV-SNP on GCP using RHCOS by iroykaufman · Pull Request #39 · trusted-execution-clusters/investigations

iroykaufman · 2025-09-16T12:48:50Z

See README.md for details.

alicefr · 2025-10-07T07:36:28Z

@iroykaufman can you please use the clevis pin instead of the old script running the attestation agent? It should also be easier for you. We should align to the latest way to perform attestation

alicefr · 2025-10-29T14:14:31Z

 label := if os == "scos" { scos_label } else { fcos_label }
 archive := os + ".ociarchive"
+platform := "qemu"
+kbc_image := "quay.io/afrosi_rh/kbs-client-image:latest"


can we use our own built trustee agent?https://quay.io/repository/confidential-clusters/trustee-attester

This version support TPM as an additional device?

Yes, it is built from the latest guest component, but you need to register the trusted AK in trustee.

I checked again in the upstream and it's look like the TPM can only be primary device. This is where I look https://github.com/confidential-containers/guest-components/blob/main/attestation-agent/attester/src/lib.rs .
I created this PR#1093 to add this option

Sorry, I might have misunderstood the previous comment. Isn't the tpm the attester used on GCP?

Not only, also SEV-SNP is use for attestation. I add the option for a vm with TPM and another TEE to set the TPM as an additional device for attestation.

Ah I see. We didn't detect this because the local dev environment isn't a real CVM. Would you mind to fork the guest component in our org and add your patch there? In this way, we know which version is working and build the images out of it. Once, the PR is merged we can delete the repository.
We should try to have common images where we do our testing otherwise, it becomes very messy
/cc @Jakob-Naucke

I don't have permissions to add a fork.

I added you, you should have an invitation

alicefr · 2025-11-27T12:04:33Z

@@ -0,0 +1,21 @@
+variant: fcos


Why do we have this file twice? We already have it present in https://github.com/trusted-execution-clusters/investigations/blob/main/configs/remote-ign/pin-trustee.bu

alicefr · 2025-11-27T12:07:39Z

@@ -0,0 +1,41 @@
+variant: fcos


This is a duplication of https://github.com/trusted-execution-clusters/investigations/blob/main/configs/ak.bu

alicefr · 2025-11-27T12:09:29Z

+FROM quay.io/rkaufman/trustee-attester:TPM-additional-dev as kbc
+FROM quay.io/trusted-execution-clusters/clevis-pin-trustee as clevis


why replacing the variables?

This is also outdated, I replace all of them to be taken from quay.io/trusted-execution-clusters so it will match the upstream.

alicefr · 2025-11-27T12:15:28Z

@@ -0,0 +1,32 @@
+#!/bin/bash


What is script used for if you have also the script populate_kbs_gcp?

alicefr · 2025-11-27T12:19:20Z

+# Create attestation policy
+## This policy allows access only if the system’s TPM or SNP 
+## hardware measurements match trusted reference values
+cat << 'EOF' > A_policy.rego


It is a bit confusing because you have olso the configs/containers/policy.rego. Which on are you using for the demo?

I'm using A_policy.rego. configs/containers/policy.rego was there from the previous setup for bare-metal VM

alicefr · 2025-11-27T12:24:57Z

@iroykaufman can you please clean-up the commits structure? There are several commits that changes what the previous commit does, it makes it a bit hard to review and the git commit history isn't that clean. Also you have 2 scripts for populate the kbs, which one is the correct one?

alicefr · 2025-12-16T12:50:32Z

@iroykaufman we are getting close, just a few last questions and comments

uril

Looks good; I added some comments.

Signed-off-by: Roy Kaufman <rkaufman@redhat.com>

using AK registration Signed-off-by: Roy Kaufman <rkaufman@redhat.com>

travier reviewed Sep 17, 2025

View reviewed changes

Comment thread trustee-on-GCP/rh-coreos/Containerfile Outdated

alicefr reviewed Oct 7, 2025

View reviewed changes

Comment thread trustee-on-GCP/rh-coreos/luks.bu

alicefr reviewed Oct 7, 2025

View reviewed changes

Comment thread trustee-on-GCP/rh-coreos/Containerfile Outdated

iroykaufman force-pushed the trustee-on-GCP branch 2 times, most recently from 0c280f3 to e2e5133 Compare October 23, 2025 08:48

alicefr reviewed Oct 29, 2025

View reviewed changes

Comment thread configs/trustee-gcp/containers/kbc.container

alicefr reviewed Oct 29, 2025

View reviewed changes

Comment thread trustee-on-GCP/scripts/deploy-client.sh Outdated

alicefr reviewed Oct 29, 2025

View reviewed changes

Comment thread coreos/justfile Outdated

alicefr reviewed Oct 29, 2025

View reviewed changes

Comment thread trustee-on-GCP/README.md Outdated

Comment thread configs/trustee-gcp.bu Outdated

iroykaufman force-pushed the trustee-on-GCP branch 3 times, most recently from c84a30a to ca6e9e4 Compare November 16, 2025 14:06

iroykaufman force-pushed the trustee-on-GCP branch 2 times, most recently from 986fc71 to 02ee44c Compare November 23, 2025 15:05

iroykaufman requested a review from alicefr November 23, 2025 15:08

iroykaufman force-pushed the trustee-on-GCP branch from 02ee44c to afbb892 Compare November 27, 2025 09:10

alicefr reviewed Nov 27, 2025

View reviewed changes

Comment thread run.sh Outdated

alicefr reviewed Nov 27, 2025

View reviewed changes

iroykaufman force-pushed the trustee-on-GCP branch 5 times, most recently from 4e3ca3c to 41425d6 Compare November 27, 2025 13:59

iroykaufman force-pushed the trustee-on-GCP branch from 41425d6 to bea2627 Compare December 15, 2025 07:56

iroykaufman requested a review from alicefr December 15, 2025 15:41

alicefr reviewed Dec 16, 2025

View reviewed changes

Comment thread coreos/usr/lib/dracut/modules.d/66tmp_tools/module-setup.sh Outdated

Comment thread scripts/GCP/deploy-vm.sh Outdated

Comment thread configs/trustee/populate_kbs.sh Outdated

iroykaufman force-pushed the trustee-on-GCP branch from bea2627 to 844b8ec Compare December 16, 2025 13:45

iroykaufman requested a review from alicefr December 18, 2025 07:55

iroykaufman force-pushed the trustee-on-GCP branch 5 times, most recently from 330c480 to 8a489ea Compare January 22, 2026 12:39

uril reviewed Feb 1, 2026

View reviewed changes

Comment thread configs/trustee/populate_kbs.sh Outdated

Comment thread configs/trustee/populate_kbs.sh Outdated

Comment thread coreos/justfile Outdated

Comment thread coreos/justfile Outdated

iroykaufman added 2 commits February 10, 2026 11:57

Remote attestation with PCRs and AMD SEV-SNP on GCP using RHCOS

a7f0eaa

Signed-off-by: Roy Kaufman <rkaufman@redhat.com>

Update to the latest way of preforming attestation

1b62184

using AK registration Signed-off-by: Roy Kaufman <rkaufman@redhat.com>

iroykaufman force-pushed the trustee-on-GCP branch from 8a489ea to 1b62184 Compare February 10, 2026 11:28

		FROM quay.io/rkaufman/trustee-attester:TPM-additional-dev as kbc
		FROM quay.io/trusted-execution-clusters/clevis-pin-trustee as clevis

Conversation

iroykaufman commented Sep 16, 2025

Uh oh!

Uh oh!

Uh oh!

Uh oh!

alicefr commented Oct 7, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

alicefr Oct 30, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

iroykaufman Oct 30, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

iroykaufman Nov 27, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

alicefr commented Nov 27, 2025

Uh oh!

Uh oh!

Uh oh!

Uh oh!

alicefr commented Dec 16, 2025

Uh oh!

uril left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

alicefr commented Oct 7, 2025 •

edited

Loading

alicefr Oct 30, 2025 •

edited

Loading

iroykaufman Oct 30, 2025 •

edited

Loading

iroykaufman Nov 27, 2025 •

edited

Loading