Skip to content

standalone: want option to hash contents of boot disk #1071

@jordanhendricks

Description

@jordanhendricks

Incremental work for #1067. Most useful for #1067 when built upon #1068, but technically we could merge this work indepdently.

An example TOML file. The new calc_boot_digest flag requires a boot order specified:

[main]
name = "boot-digest"
cpus = 4
bootrom = "/home/jordan/src/propolis/ovmf/OVMF_CODE.fd"
memory = 1024
calc_boot_digest = true
boot_order = [ "block01" ]

[block_dev.vm_attest_disk]
type = "file"
#path = "/dev/zvol/rdsk/rpool/propolis/vm-attest-img"
path = "/home/jordan/src/propolis/images/vm-instance_staging-a.raw"
read_only = true

[dev.block01]
driver = "pci-nvme"
block_dev = "vm_attest_disk"
pci-path = "0.7.0"


[dev.net0]
driver = "pci-virtio-viona"
vnic = "vnic_prop0"
pci-path = "0.5.0"

An initial pass at just file-backed disks (hashing a local file on disk), then printing out the hash on start is: https://github.com/oxidecomputer/propolis/tree/jhendricks/calc-boot-digest

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions