mirror of
https://github.com/kata-containers/kata-containers.git
synced 2026-07-25 14:18:54 +00:00
4e50fe29b3
With the Go runtime confidential/GPU configs now booting the composable
base image plus cold-plugged guest extensions, teach the packaging layer
to ship and measure the matching tarballs:
- shim-components.json: point the qemu-snp, qemu-tdx, qemu-coco-dev,
qemu-nvidia-gpu and qemu-nvidia-gpu-{snp,tdx} shim-v2-go entries at the
base image (rootfs-image / rootfs-image-nvidia) and the relevant
extension tarballs (rootfs-image-coco-extension,
rootfs-image-nvidia-gpu-extension) instead of the monolithic images.
- shim-v2/build.sh: rewire GO_EXTRA_OPTS to resolve dm-verity root hashes
from the base and extension images (via SPLIT_EXTRA_OPTS), mirroring the
logic already used for runtime-rs, so the generated configs get the
correct base/extension root hashes.
- kata-deploy-binaries.sh: update comments to note that the root hashes are
now consumed by both runtimes and that the monolithic images are no
longer built in CI nor referenced by the shipped configs (kept only as
manually buildable standalone targets).
Signed-off-by: Fabiano Fidêncio <ffidencio@nvidia.com>
Assisted-by: Cursor <cursoragent@cursor.com>
Signed-off-by: Fabiano Fidêncio <ffidencio@nvidia.com>