Query verified CIM digest for layers - #46

Open

ambarve wants to merge 20 commits into

MahatiC:cwcow-inside-uvmfrom

ambarve:use-vcim-digest

Commits on May 27, 2025

Refactor common bridge protocol code for reuse
kiashok
committed
5c0ae2d

Commits on Jun 11, 2025

gcs-sidecar framework
kiashok
committed
3f07f1e

Commits on Jul 3, 2025

Add Block CIM mount and refs format support
kiashok
committed
42508de
C-WCOW: Policy enforcement squashed commits

MahatiC
authored and
kiashok
committed
dac494e
gcs-sidecar: Squahsed following commits

kiashok
and
ambarve
committed
d58b8a2
Conditionally startup psp driver
kiashok
committed
c5db9b6
[DO NOT MERGE] Mock verified CIM digest for layers

ambarve
authored and
kiashok
committed
0469d2a
[DO NOT MERGE] Allow testing with non SNP hardware

ambarve
authored and
kiashok
committed
30c4bed
C-WCOW: Securitpolicy pkg changes and enforce CIMs

MahatiC
authored and
kiashok
committed
df55c0a
Send container spec while creating container
kiashok
committed
ae683b2
CWCOW: Implement security policy

MahatiC
authored and
kiashok
committed
e639940

Commits on Jul 10, 2025

Initial support for verified CIMs
ambarve
committed
58dc6fb
Query root digest of the layer CIM
ambarve
committed
6bfae48
Use VBS isolation and secure boot by default.
ambarve
committed
bef3f36
Linter fixes
ambarve
committed
3923d8f
Use new verified CIM mount API
ambarve
committed
abe39e1
format container scratch in superfloppy mode
ambarve
committed
37f9cc9
Fix the incorrect mount flag when mounting in the UVM
ambarve
committed
1bfd0af
Add default allow all policy to uvmboot
ambarve
committed
0dae66c

Commits on Jul 24, 2025

Attach EFI VHD as read-only
ambarve
committed
e7c9e65