runtime: update genereated proto code

This should have been part of 10b24a19c8.

Signed-off-by: Markus Rudy <mr@edgeless.systems>

.github/workflows/ci-coco-stability.yaml

@@ -26,8 +26,8 @@ jobs:
       target-branch: ${{ github.ref_name }}
     secrets:
       AUTHENTICATED_IMAGE_PASSWORD: ${{ secrets.AUTHENTICATED_IMAGE_PASSWORD }}
-      AZ_APPID2: ${{ secrets.AZ_APPID2 }}
-      AZ_TENANT_ID2: ${{ secrets.AZ_TENANT_ID2 }}
-      AZ_SUBSCRIPTION_ID2: ${{ secrets.AZ_SUBSCRIPTION_ID2 }}
+      AZ_APPID: ${{ secrets.AZ_APPID }}
+      AZ_TENANT_ID: ${{ secrets.AZ_TENANT_ID }}
+      AZ_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID }}
       QUAY_DEPLOYER_PASSWORD: ${{ secrets.QUAY_DEPLOYER_PASSWORD }}
       KBUILD_SIGN_PIN: ${{ secrets.KBUILD_SIGN_PIN }}

.github/workflows/ci-devel.yaml

@@ -21,9 +21,9 @@ jobs:
 
     secrets:
       AUTHENTICATED_IMAGE_PASSWORD: ${{ secrets.AUTHENTICATED_IMAGE_PASSWORD }}
-      AZ_APPID2: ${{ secrets.AZ_APPID2 }}
-      AZ_TENANT_ID2: ${{ secrets.AZ_TENANT_ID2 }}
-      AZ_SUBSCRIPTION_ID2: ${{ secrets.AZ_SUBSCRIPTION_ID2 }}
+      AZ_APPID: ${{ secrets.AZ_APPID }}
+      AZ_TENANT_ID: ${{ secrets.AZ_TENANT_ID }}
+      AZ_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID }}
       CI_HKD_PATH: ${{ secrets.CI_HKD_PATH }}
       ITA_KEY: ${{ secrets.ITA_KEY }}
       QUAY_DEPLOYER_PASSWORD: ${{ secrets.QUAY_DEPLOYER_PASSWORD }}

.github/workflows/ci-nightly.yaml

@@ -25,9 +25,9 @@ jobs:
       extensive-matrix-autogenerated-policy: "yes"
     secrets:
       AUTHENTICATED_IMAGE_PASSWORD: ${{ secrets.AUTHENTICATED_IMAGE_PASSWORD }}
-      AZ_APPID2: ${{ secrets.AZ_APPID2 }}
-      AZ_TENANT_ID2: ${{ secrets.AZ_TENANT_ID2 }}
-      AZ_SUBSCRIPTION_ID2: ${{ secrets.AZ_SUBSCRIPTION_ID2 }}
+      AZ_APPID: ${{ secrets.AZ_APPID }}
+      AZ_TENANT_ID: ${{ secrets.AZ_TENANT_ID }}
+      AZ_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID }}
       CI_HKD_PATH: ${{ secrets.CI_HKD_PATH }}
       ITA_KEY: ${{ secrets.ITA_KEY }}
       QUAY_DEPLOYER_PASSWORD: ${{ secrets.QUAY_DEPLOYER_PASSWORD }}

.github/workflows/ci-on-push.yaml

@@ -44,9 +44,9 @@ jobs:
       skip-test: ${{ needs.skipper.outputs.skip_test }}
     secrets:
       AUTHENTICATED_IMAGE_PASSWORD: ${{ secrets.AUTHENTICATED_IMAGE_PASSWORD }}
-      AZ_APPID2: ${{ secrets.AZ_APPID2 }}
-      AZ_TENANT_ID2: ${{ secrets.AZ_TENANT_ID2 }}
-      AZ_SUBSCRIPTION_ID2: ${{ secrets.AZ_SUBSCRIPTION_ID2 }}
+      AZ_APPID: ${{ secrets.AZ_APPID }}
+      AZ_TENANT_ID: ${{ secrets.AZ_TENANT_ID }}
+      AZ_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID }}
       CI_HKD_PATH: ${{ secrets.CI_HKD_PATH }}
       ITA_KEY: ${{ secrets.ITA_KEY }}
       QUAY_DEPLOYER_PASSWORD: ${{ secrets.QUAY_DEPLOYER_PASSWORD }}

.github/workflows/ci-weekly.yaml

@@ -19,11 +19,11 @@ on:
       AUTHENTICATED_IMAGE_PASSWORD:
         required: true
 
-      AZ_APPID2:
+      AZ_APPID:
         required: true
-      AZ_TENANT_ID2:
+      AZ_TENANT_ID:
        required: true
-      AZ_SUBSCRIPTION_ID2:
+      AZ_SUBSCRIPTION_ID:
         required: true
       QUAY_DEPLOYER_PASSWORD:
         required: true
@@ -120,9 +120,9 @@ jobs:
       tarball-suffix: -${{ inputs.tag }}
     secrets:
       AUTHENTICATED_IMAGE_PASSWORD: ${{ secrets.AUTHENTICATED_IMAGE_PASSWORD }}
-      AZ_APPID2: ${{ secrets.AZ_APPID2 }}
-      AZ_TENANT_ID2: ${{ secrets.AZ_TENANT_ID2 }}
-      AZ_SUBSCRIPTION_ID2: ${{ secrets.AZ_SUBSCRIPTION_ID2 }}
+      AZ_APPID: ${{ secrets.AZ_APPID }}
+      AZ_TENANT_ID: ${{ secrets.AZ_TENANT_ID }}
+      AZ_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID }}
     permissions:
       contents: read
       id-token: write

.github/workflows/ci.yaml

@@ -27,11 +27,11 @@ on:
       AUTHENTICATED_IMAGE_PASSWORD:
         required: true
 
-      AZ_APPID2:
+      AZ_APPID:
         required: true
-      AZ_TENANT_ID2:
+      AZ_TENANT_ID:
        required: true
-      AZ_SUBSCRIPTION_ID2:
+      AZ_SUBSCRIPTION_ID:
         required: true
       CI_HKD_PATH:
         required: true
@@ -242,9 +242,9 @@ jobs:
       pr-number: ${{ inputs.pr-number }}
       target-branch: ${{ inputs.target-branch }}
     secrets:
-      AZ_APPID2: ${{ secrets.AZ_APPID2 }}
-      AZ_TENANT_ID2: ${{ secrets.AZ_TENANT_ID2 }}
-      AZ_SUBSCRIPTION_ID2: ${{ secrets.AZ_SUBSCRIPTION_ID2 }}
+      AZ_APPID: ${{ secrets.AZ_APPID }}
+      AZ_TENANT_ID: ${{ secrets.AZ_TENANT_ID }}
+      AZ_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID }}
 
   run-k8s-tests-on-free-runner:
     if: ${{ inputs.skip-test != 'yes' }}
@@ -309,9 +309,9 @@ jobs:
       extensive-matrix-autogenerated-policy: ${{ inputs.extensive-matrix-autogenerated-policy }}
     secrets:
       AUTHENTICATED_IMAGE_PASSWORD: ${{ secrets.AUTHENTICATED_IMAGE_PASSWORD }}
-      AZ_APPID2: ${{ secrets.AZ_APPID2 }}
-      AZ_TENANT_ID2: ${{ secrets.AZ_TENANT_ID2 }}
-      AZ_SUBSCRIPTION_ID2: ${{ secrets.AZ_SUBSCRIPTION_ID2 }}
+      AZ_APPID: ${{ secrets.AZ_APPID }}
+      AZ_TENANT_ID: ${{ secrets.AZ_TENANT_ID }}
+      AZ_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID }}
       ITA_KEY: ${{ secrets.ITA_KEY }}
 
   run-k8s-tests-on-zvsi:

.github/workflows/cleanup-resources.yaml

@@ -23,9 +23,9 @@ jobs:
       - name: Log into Azure
         uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5 # v2.3.0
         with:
-          client-id: ${{ secrets.AZ_APPID2 }}
-          tenant-id: ${{ secrets.AZ_TENANT_ID2 }}
-          subscription-id: ${{ secrets.AZ_SUBSCRIPTION_ID2 }}
+          client-id: ${{ secrets.AZ_APPID }}
+          tenant-id: ${{ secrets.AZ_TENANT_ID }}
+          subscription-id: ${{ secrets.AZ_SUBSCRIPTION_ID }}
 
       - name: Install Python dependencies
         run: |
@@ -35,6 +35,6 @@ jobs:
 
       - name: Cleanup resources
         env:
-          AZ_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID2 }}
+          AZ_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID }}
           CLEANUP_AFTER_HOURS: 24 # Clean up resources created more than this many hours ago.
         run: python3 tests/cleanup_resources.py

.github/workflows/run-k8s-tests-on-aks.yaml

@@ -26,11 +26,11 @@ on:
         default: ""
     secrets:
 
-      AZ_APPID2:
+      AZ_APPID:
         required: true
-      AZ_TENANT_ID2:
+      AZ_TENANT_ID:
        required: true
-      AZ_SUBSCRIPTION_ID2:
+      AZ_SUBSCRIPTION_ID:
         required: true
 
 
@@ -102,9 +102,9 @@ jobs:
       - name: Log into the Azure account
         uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5 # v2.3.0
         with:
-          client-id: ${{ secrets.AZ_APPID2 }}
-          tenant-id: ${{ secrets.AZ_TENANT_ID2 }}
-          subscription-id: ${{ secrets.AZ_SUBSCRIPTION_ID2 }}
+          client-id: ${{ secrets.AZ_APPID }}
+          tenant-id: ${{ secrets.AZ_TENANT_ID }}
+          subscription-id: ${{ secrets.AZ_SUBSCRIPTION_ID }}
 
       - name: Create AKS cluster
         uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3.0.2
@@ -142,9 +142,9 @@ jobs:
         if: always()
         uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5 # v2.3.0
         with:
-          client-id: ${{ secrets.AZ_APPID2 }}
-          tenant-id: ${{ secrets.AZ_TENANT_ID2 }}
-          subscription-id: ${{ secrets.AZ_SUBSCRIPTION_ID2 }}
+          client-id: ${{ secrets.AZ_APPID }}
+          tenant-id: ${{ secrets.AZ_TENANT_ID }}
+          subscription-id: ${{ secrets.AZ_SUBSCRIPTION_ID }}
 
       - name: Delete AKS cluster
         if: always()

.github/workflows/run-kata-coco-stability-tests.yaml

@@ -26,11 +26,11 @@ on:
         type: string
     secrets:
 
-      AZ_APPID2:
+      AZ_APPID:
         required: true
-      AZ_TENANT_ID2:
+      AZ_TENANT_ID:
        required: true
-      AZ_SUBSCRIPTION_ID2:
+      AZ_SUBSCRIPTION_ID:
         required: true
       AUTHENTICATED_IMAGE_PASSWORD:
         required: true
@@ -98,9 +98,9 @@ jobs:
       - name: Log into the Azure account
         uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5 # v2.3.0
         with:
-          client-id: ${{ secrets.AZ_APPID2 }}
-          tenant-id: ${{ secrets.AZ_TENANT_ID2 }}
-          subscription-id: ${{ secrets.AZ_SUBSCRIPTION_ID2 }}
+          client-id: ${{ secrets.AZ_APPID }}
+          tenant-id: ${{ secrets.AZ_TENANT_ID }}
+          subscription-id: ${{ secrets.AZ_SUBSCRIPTION_ID }}
 
       - name: Create AKS cluster
         uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3.0.2
@@ -150,9 +150,9 @@ jobs:
         if: always()
         uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5 # v2.3.0
         with:
-          client-id: ${{ secrets.AZ_APPID2 }}
-          tenant-id: ${{ secrets.AZ_TENANT_ID2 }}
-          subscription-id: ${{ secrets.AZ_SUBSCRIPTION_ID2 }}
+          client-id: ${{ secrets.AZ_APPID }}
+          tenant-id: ${{ secrets.AZ_TENANT_ID }}
+          subscription-id: ${{ secrets.AZ_SUBSCRIPTION_ID }}
 
       - name: Delete AKS cluster
         if: always()

.github/workflows/run-kata-coco-tests.yaml

@@ -31,11 +31,11 @@ on:
     secrets:
       AUTHENTICATED_IMAGE_PASSWORD:
         required: true
-      AZ_APPID2:
+      AZ_APPID:
         required: true
-      AZ_TENANT_ID2:
+      AZ_TENANT_ID:
        required: true
-      AZ_SUBSCRIPTION_ID2:
+      AZ_SUBSCRIPTION_ID:
         required: true
       ITA_KEY:
         required: true

.github/workflows/run-kata-deploy-tests-on-aks.yaml

@@ -22,11 +22,11 @@ on:
         type: string
         default: ""
     secrets:
-      AZ_APPID2:
+      AZ_APPID:
         required: true
-      AZ_TENANT_ID2:
+      AZ_TENANT_ID:
        required: true
-      AZ_SUBSCRIPTION_ID2:
+      AZ_SUBSCRIPTION_ID:
         required: true
 
 permissions: {}
@@ -77,9 +77,9 @@ jobs:
       - name: Log into the Azure account
         uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5 # v2.3.0
         with:
-          client-id: ${{ secrets.AZ_APPID2 }}
-          tenant-id: ${{ secrets.AZ_TENANT_ID2 }}
-          subscription-id: ${{ secrets.AZ_SUBSCRIPTION_ID2 }}
+          client-id: ${{ secrets.AZ_APPID }}
+          tenant-id: ${{ secrets.AZ_TENANT_ID }}
+          subscription-id: ${{ secrets.AZ_SUBSCRIPTION_ID }}
 
       - name: Create AKS cluster
         uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3.0.2
@@ -112,9 +112,9 @@ jobs:
         if: always()
         uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5 # v2.3.0
         with:
-          client-id: ${{ secrets.AZ_APPID2 }}
-          tenant-id: ${{ secrets.AZ_TENANT_ID2 }}
-          subscription-id: ${{ secrets.AZ_SUBSCRIPTION_ID2 }}
+          client-id: ${{ secrets.AZ_APPID }}
+          tenant-id: ${{ secrets.AZ_TENANT_ID }}
+          subscription-id: ${{ secrets.AZ_SUBSCRIPTION_ID }}
 
       - name: Delete AKS cluster
         if: always()

Cargo.lock

@@ -4031,6 +4031,15 @@ dependencies = [
  "syn 2.0.117",
 ]
 
+[[package]]
+name = "msvc_spectre_libs"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29e871a9861f3664f18b7e04e9301d4edd55090c2dadb4b1c602e26ab32b1f5b"
+dependencies = [
+ "cc",
+]
+
 [[package]]
 name = "multimap"
 version = "0.8.3"
@@ -5892,18 +5901,22 @@ checksum = "dc897dd8d9e8bd1ed8cdad82b5966c3e0ecae09fb1907d58efaa013543185d0a"
 
 [[package]]
 name = "regorus"
-version = "0.2.8"
+version = "0.9.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "843c3d97f07e3b5ac0955d53ad0af4c91fe4a4f8525843ece5bf014f27829b73"
+checksum = "656c9768f1d2113590ebc05e2e342a9f76baa97a445f2928f24eec9ae1fb14ac"
 dependencies = [
  "anyhow",
  "data-encoding",
  "lazy_static",
- "rand 0.8.5",
+ "msvc_spectre_libs",
+ "num-bigint",
+ "num-traits",
+ "rand 0.9.2",
  "regex",
- "scientific",
  "serde",
  "serde_json",
+ "spin",
+ "thiserror 2.0.18",
 ]
 
 [[package]]
@@ -6535,26 +6548,6 @@ dependencies = [
  "syn 2.0.117",
 ]
 
-[[package]]
-name = "scientific"
-version = "0.5.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "38a4b339a8de779ecb098a772ecbba2ace74e23ed959a5b4f30631d8bf1799a8"
-dependencies = [
- "scientific-macro",
-]
-
-[[package]]
-name = "scientific-macro"
-version = "0.5.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d2ee4885492bb655bfa05d039cd9163eb8fe9f79ddebf00ca23a1637510c2fd2"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.117",
-]
-
 [[package]]
 name = "scopeguard"
 version = "1.2.0"
@@ -7126,6 +7119,12 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
 
+[[package]]
+name = "spin"
+version = "0.9.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6980e8d7511241f8acf4aebddbb1ff938df5eebe98691418c4468d0b72a96a67"
+
 [[package]]
 name = "stable_deref_trait"
 version = "1.2.1"

src/agent/policy/Cargo.toml

@@ -16,7 +16,7 @@ serde.workspace = true
 serde_json.workspace = true
 
 # Agent Policy
-regorus = { version = "0.2.8", default-features = false, features = [
+regorus = { version = "0.9.1", default-features = false, features = [
     "arc",
     "base64",
     "base64url",

src/runtime/virtcontainers/pkg/agent/protocols/grpc/agent.pb.go

@@ -3411,7 +3411,7 @@ type Storage struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Driver is used to define the way the storage is passed through the
-	// virtual machine. It can be "9p", "blk", or something else, but for
+	// virtual machine. It can be "blk", or something else, but for
 	// all cases, this will define if some extra steps are required before
 	// this storage gets mounted into the container.
 	Driver string `protobuf:"bytes,1,opt,name=driver,proto3" json:"driver,omitempty"`
@@ -3427,7 +3427,7 @@ type Storage struct {
 	Source string `protobuf:"bytes,3,opt,name=source,proto3" json:"source,omitempty"`
 	// Fstype represents the filesystem that needs to be used to mount the
 	// storage inside the VM. For instance, it could be "xfs" for block
-	// device, "9p" for shared filesystem, or "tmpfs" for shared /dev/shm.
+	// device, or "tmpfs" for shared /dev/shm.
 	Fstype string `protobuf:"bytes,4,opt,name=fstype,proto3" json:"fstype,omitempty"`
 	// Options describes the additional options that might be needed to
 	// mount properly the storage filesystem.