diff --git a/tools/packaging/kata-deploy/local-build/Makefile b/tools/packaging/kata-deploy/local-build/Makefile index b9ed149c71..6c09ab87a6 100644 --- a/tools/packaging/kata-deploy/local-build/Makefile +++ b/tools/packaging/kata-deploy/local-build/Makefile @@ -86,6 +86,7 @@ cc: cc-cloud-hypervisor-tarball \ cc-shim-v2-tarball \ cc-virtiofsd-tarball \ cc-tdx-kernel-tarball \ + cc-sev-kernel-tarball \ cc-tdx-qemu-tarball \ cc-tdx-td-shim-tarball \ cc-tdx-tdvf-tarball \ @@ -119,6 +120,9 @@ cc-tdx-cloud-hypervisor-tarball: cc-tdx-kernel-tarball: ${MAKE} $@-build +cc-sev-kernel-tarball: + ${MAKE} $@-build + cc-tdx-qemu-tarball: ${MAKE} $@-build diff --git a/tools/packaging/kata-deploy/local-build/kata-deploy-binaries.sh b/tools/packaging/kata-deploy/local-build/kata-deploy-binaries.sh index 9331b333d4..f1e60b4c2a 100755 --- a/tools/packaging/kata-deploy/local-build/kata-deploy-binaries.sh +++ b/tools/packaging/kata-deploy/local-build/kata-deploy-binaries.sh @@ -87,6 +87,7 @@ options: cc-cloud-hypervisor cc-kernel cc-tdx-kernel + cc-sev-kernel cc-qemu cc-tdx-qemu cc-rootfs-image @@ -170,17 +171,23 @@ install_tdx_cc_clh() { #Install CC kernel assert, with TEE support install_cc_tee_kernel() { tee="${1}" + kernel_version="${2}" - [ "${tee}" != "tdx" ] && die "Non supported TEE" + [[ "${tee}" != "tdx" && "${tee}" != "sev" ]] && die "Non supported TEE" - export kernel_version="$(yq r $versions_yaml assets.kernel.${tee}.tag)" - export kernel_url="$(yq r $versions_yaml assets.kernel.${tee}.url)" + kernel_url="$(yq r $versions_yaml assets.kernel.${tee}.url)" DESTDIR="${destdir}" PREFIX="${cc_prefix}" "${kernel_builder}" -x "${tee}" -v "${kernel_version}" -u "${kernel_url}" } #Install CC kernel assert for Intel TDX install_cc_tdx_kernel() { - install_cc_tee_kernel "tdx" + kernel_version="$(yq r $versions_yaml assets.kernel.tdx.tag)" + install_cc_tee_kernel "tdx" "${kernel_version}" +} + +install_cc_sev_kernel() { + kernel_version="$(yq r $versions_yaml assets.kernel.sev.version)" + install_cc_tee_kernel "sev" "${kernel_version}" } install_cc_tee_qemu() { @@ -345,6 +352,8 @@ handle_build() { cc-tdx-kernel) install_cc_tdx_kernel ;; + cc-sev-kernel) install_cc_sev_kernel ;; + cc-tdx-qemu) install_cc_tdx_qemu ;; cc-tdx-td-shim) install_cc_tdx_td_shim ;; diff --git a/tools/packaging/static-build/kernel/Dockerfile b/tools/packaging/static-build/kernel/Dockerfile index 2595a08e72..4953193dc3 100644 --- a/tools/packaging/static-build/kernel/Dockerfile +++ b/tools/packaging/static-build/kernel/Dockerfile @@ -17,6 +17,7 @@ RUN apt-get update && \ git \ iptables \ libelf-dev \ + libssl-dev \ patch && \ if [ "$(uname -m)" = "s390x" ]; then apt-get install -y --no-install-recommends libssl-dev; fi && \ apt-get clean && rm -rf /var/lib/lists/