github/kata-containers
1
0
Fork 1
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-08-18 16:08:25 +00:00
Code Issues Projects Releases Wiki Activity

packaging: Allow building a TDX capable QEMU

Browse Source 
We're adding a new target for building a TDX capable QEMU for CC.
This commit, differently than b307531c29,
introduces support for building the artefacts that are TEE specific.

Fixes: #4623

Signed-off-by: Fabiano Fidêncio <fabiano.fidencio@intel.com>
This commit is contained in:
Fabiano Fidêncio 2022-07-12 15:20:19 +02:00
parent 6d9d8e0660
commit be165c40f9
3 changed files with 28 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
tools/packaging/kata-deploy/local-build/Makefile
View File

@ -94,6 +94,9 @@ cc-tdx-kernel-tarball:
cc-qemu-tarball:
${MAKE} $@-build
cc-tdx-qemu-tarball:
${MAKE} $@-build
cc-rootfs-image-tarball:
${MAKE} $@-build

20
tools/packaging/kata-deploy/local-build/kata-deploy-binaries.sh
View File

@ -86,6 +86,7 @@ options:
cc-kernel
cc-tdx-kernel
cc-qemu
cc-tdx-qemu
cc-rootfs-image
cc-shimv2
cc-virtiofsd
@ -139,6 +140,23 @@ install_cc_kernel() {
DESTDIR="${destdir}" PREFIX="${cc_prefix}" "${kernel_builder}" -f -v "${kernel_version}"
}
install_cc_tee_qemu() {
tee="${1}"
[ "${tee}" != "tdx" ] && die "Non supported TEE"
export qemu_repo="$(yq r $versions_yaml assets.hypervisor.qemu.${tee}.url)"
export qemu_version="$(yq r $versions_yaml assets.hypervisor.qemu.${tee}.tag)"
export tee="${tee}"
"${qemu_cc_builder}"
tar xvf "${builddir}/kata-static-${tee}-qemu-cc.tar.gz" -C "${destdir}"
}
install_cc_tdx_qemu() {
install_cc_tee_qemu "tdx"
}
# Install static CC qemu asset
install_cc_qemu() {
info "build static CC qemu"
@ -279,6 +297,8 @@ handle_build() {
cc-qemu) install_cc_qemu ;;
cc-tdx-qemu) install_cc_tdx_qemu ;;
cc-rootfs-image) install_cc_image ;;
cc-shim-v2) install_cc_shimv2 ;;

6
tools/packaging/static-build/qemu/build-static-qemu-cc.sh
View File

@ -14,6 +14,7 @@ source "${script_dir}/../../scripts/lib.sh"
qemu_repo="${qemu_repo:-}"
qemu_version="${qemu_version:-}"
tee="${tee:-}"
export prefix="/opt/confidential-containers/"
@ -28,4 +29,7 @@ fi
[ -n "$qemu_version" ] || qemu_version=$(get_from_kata_deps "assets.hypervisor.qemu.version")
[ -n "$qemu_version" ] || die "failed to get qemu version"
"${script_dir}/build-base-qemu.sh" "${qemu_repo}" "${qemu_version}" "" "kata-static-qemu-cc.tar.gz"
tarball_name="kata-static-qemu-cc.tar.gz"
[ -n "${tee}" ] && tarball_name="kata-static-${tee}-qemu-cc.tar.gz"
"${script_dir}/build-base-qemu.sh" "${qemu_repo}" "${qemu_version}" "${tee}" "${tarball_name}"