CC Trusted API VM SDK
Project description
SDK for CC Trusted API in Confidential VM
In confidential VM, the trusted primitives (measurement, eventlog, quote) normally can be accessed via device node like /dev/tpm0, sysfs etc, and different vendor may provides the different definitions.
This VMSDK following the CC Trusted API design shields the difference introduced by the platform and provides user with unified usage in the confidential virtual machine environments.
NOTE: VMSDK
currently supports Python, and it will provide support on Rust and Golang later.
How to use VMSDK
VMSDK is supposed to provide trusted primitives (measurement, eventlog, quote) of CVM. All below steps are supposed to run in a CVM, such as Intel® TD.
Installation
VMSDK
package is already available in PyPI. You can install the SDK simply by:
$ pip install cctrusted-vm
If you would like to run from source code. Try:
$ git clone https://github.com/cc-api/cc-trusted-vmsdk.git
$ cd cc-trusted-vmsdk
$ source setupenv.sh
Run CLI tool
It provides 3 CLI tools for quick usage of Python VMSDK.
- cc_event_log_cli.py: Print event log of CVM.
- cc_imr_cli.py: Print algorithm and hash od Integrity Measurement Registers (IMR).
- cc_quote_cli.py: Print quote of CVM.
How to run the CLI tool:
$ git clone https://github.com/cc-api/cc-trusted-vmsdk.git
$ cd cc-trusted-vmsdk
$ sudo su
$ source setupenv.sh
$ python3 ./src/python/cc_imr_cli.py
NOTE: The CLI tool needs to run via root user.
Below is example output of cc_imr_cli.py
.
Run Tests
It provides test cases for Python VMSDK. Run tests with below commands.
$ git clone https://github.com/cc-api/cc-trusted-vmsdk.git
$ cd cc-trusted-vmsdk
$ sudo su
$ source setupenv.sh
$ python3 -m pip install pytest
$ python3 -m pytest -v ./src/python/tests/test_sdk.py
NOTE: The tests need to run via root user.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for cctrusted_vm-0.5.0-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 217904313726e5a188badb2a3ad45851617f16fd047165baf3f2b007a513c61a |
|
MD5 | c6f4a76eaed466ba839c1a7cde22a682 |
|
BLAKE2b-256 | ec072561535c8b5b54a7c60365c73c3f503a871fc0f025dac03dfcdef8707a2d |