chore(deps): update guest-components

This patch updates the guest-components to new version with better
error logging for CDH. It also allows the config of AA not having a
coco_as token config.

Also, the new version of CDH requires to build aws-lc-sys thus needs to
install cmake for build.

See

https://github.com/kata-containers/kata-containers/actions/runs/15327923347/job/43127108813?pr=11197#step:6:1609

for details.

Besides, the new version of guest-components have some fixes for SNP
stack, which requires the updates of trustee side.

Signed-off-by: Xynnn007 <xynnn@linux.alibaba.com>
This commit is contained in:
Xynnn007
2025-05-30 17:51:44 +08:00
parent aae64fa3d6
commit 5bab460224
2 changed files with 6 additions and 5 deletions

View File

@@ -3,7 +3,7 @@
#
# SPDX-License-Identifier: Apache-2.0
FROM ubuntu:22.04
FROM ubuntu:24.04
ARG RUST_TOOLCHAIN
ENV DEBIAN_FRONTEND=noninteractive
@@ -28,6 +28,7 @@ RUN apt-get update && \
libssl-dev \
libtss2-dev \
make \
cmake \
musl-tools \
openssl \
perl \

View File

@@ -233,18 +233,18 @@ externals:
coco-guest-components:
description: "Provides attested key unwrapping for image decryption"
url: "https://github.com/confidential-containers/guest-components/"
version: "0a06ef241190780840fbb0542e51b198f1f72b0b"
version: "028978dbaef2510ea92bc5038928f1d70c8aaad6"
toolchain: "1.80.0"
coco-trustee:
description: "Provides attestation and secret delivery components"
url: "https://github.com/confidential-containers/trustee"
version: "d9eb5e0cb0aca97abe35b58908e061850ff60a51"
version: "a333fa27a7ce538413bad3b537ffbeacf4a349d1"
# image / ita_image and image_tag / ita_image_tag must be in sync
image: "ghcr.io/confidential-containers/staged-images/kbs"
image_tag: "d9eb5e0cb0aca97abe35b58908e061850ff60a51"
image_tag: "a333fa27a7ce538413bad3b537ffbeacf4a349d1"
ita_image: "ghcr.io/confidential-containers/staged-images/kbs-ita-as"
ita_image_tag: "d9eb5e0cb0aca97abe35b58908e061850ff60a51-x86_64"
ita_image_tag: "a333fa27a7ce538413bad3b537ffbeacf4a349d1-x86_64"
toolchain: "1.80.0"
crio: