Skip to content

Modify the Makefile to add get-quote. #611

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Nov 21, 2025
Merged

Modify the Makefile to add get-quote. #611

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/integration-emu.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -241,7 +241,7 @@ jobs:

# Run the script with timeout
set +e
timeout 600 ./sh_script/build_AzCVMEmu_policy_and_test.sh --mock-report
timeout 900 ./sh_script/build_AzCVMEmu_policy_and_test.sh --mock-report
EXIT_CODE=$?
set -e

Expand Down
32 changes: 26 additions & 6 deletions sh_script/Azure/Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,7 @@ IGVM_MANIFEST ?= config/Azure/servtd_info.json
.PHONY: pre-build build-igvm generate-hash build-igvm-all
.PHONY: build-igvm-reject build-igvm-reject-all
.PHONY: generate-hash-verbose generate-hash-accept-verbose
.PHONY: build-igvm-get-quote build-igvm-get-quote-all generate-hash-get-quote

.DEFAULT_GOAL := build-igvm-all

Expand All @@ -23,6 +24,8 @@ help:
@echo " build-igvm-all - Build IGVM"
@echo " build-igvm-accept-all - Build IGVM with disabled RA and accept all policy with TLS"
@echo " build-igvm-reject - Build IGVM with v1 policy which will be rejected because on empty quote generation."
@echo " build-igvm-reject-all - Build IGVM with v1 policy which will be rejected because on empty quote generation."
@echo " build-igvm-get-quote-all - Build IGVM with v2 policy which will call getquote durining initialization."

pre-build:
@if ! command -v rustc >/dev/null 2>&1 || ! rustc --version | grep -q "1.83.0"; then \
Expand All @@ -43,28 +46,45 @@ pre-build:
cd ../../ && ./sh_script/preparation.sh

build-igvm-accept:
cd ../../ && cargo image --no-default-features --features $(IGVM_FEATURES_DISABLE_RA_AND_ACCEPT_ALL) --log-level $(LOG_LEVEL) --image-format igvm --output $(IGVM_FILE) --debug
cd ../../ && cargo image --no-default-features --features $(IGVM_FEATURES_DISABLE_RA_AND_ACCEPT_ALL) \
--log-level $(LOG_LEVEL) --image-format igvm --output $(IGVM_FILE) --debug

generate-hash-accept:
cd ../../ && cargo run -p migtd-hash -- --image $(IGVM_FILE) --test-disable-ra-and-accept-all --manifest $(IGVM_MANIFEST)
cd ../../ && cargo run -p migtd-hash -- --image $(IGVM_FILE) --test-disable-ra-and-accept-all \
--manifest $(IGVM_MANIFEST)

generate-hash-accept-verbose:
cd ../../ && cargo run -p migtd-hash -- --image $(IGVM_FILE) --test-disable-ra-and-accept-all --verbose
cd ../../ && cargo run -p migtd-hash -- --image $(IGVM_FILE) --test-disable-ra-and-accept-all \
--verbose

build-igvm-accept-all: pre-build build-igvm-accept generate-hash-accept

generate-hash:
cd ../../ && cargo run -p migtd-hash -- --image $(IGVM_FILE) --manifest $(IGVM_MANIFEST)

build-igvm:
cd ../../ && cargo image --no-default-features --features $(IGVM_FEATURES_BASE) --log-level $(LOG_LEVEL) --image-format igvm --output $(IGVM_FILE)
cd ../../ && cargo image --no-default-features --features $(IGVM_FEATURES_BASE) --log-level $(LOG_LEVEL) \
--image-format igvm --output $(IGVM_FILE)

build-igvm-all: pre-build build-igvm generate-hash

build-igvm-reject:
cd ../../ && cargo image --no-default-features --features $(IGVM_FEATURES_BASE) --log-level debug --image-format igvm --output $(IGVM_FILE) --debug
cd ../../ && cargo image --no-default-features --features $(IGVM_FEATURES_BASE) --log-level $(LOG_LEVEL) \
--image-format igvm --output $(IGVM_FILE) --debug

build-igvm-reject-all: pre-build build-igvm-reject generate-hash

generate-hash-verbose:
cd ../../ && cargo run -p migtd-hash -- --image $(IGVM_FILE) --verbose --manifest $(IGVM_MANIFEST)
cd ../../ && cargo run -p migtd-hash -- --image $(IGVM_FILE) --verbose --manifest $(IGVM_MANIFEST)

build-igvm-get-quote:
cd ../../ && cargo image --no-default-features --features $(IGVM_FEATURES_BASE) --log-level $(LOG_LEVEL) \
--image-format igvm --output $(IGVM_FILE) --debug \
--policy-v2 --policy config/templates/policy_v2_signed.json \
--policy-issuer-chain config/templates/policy_issuer_chain.pem \
--root-ca config/Intel_SGX_Provisioning_Certification_RootCA_preproduction.cer

generate-hash-get-quote:
cd ../../ && cargo run -p migtd-hash -- --image $(IGVM_FILE) --manifest $(IGVM_MANIFEST) --policy-v2

build-igvm-get-quote-all: pre-build build-igvm-get-quote generate-hash-get-quote
Loading