The main change for this release is the added support for the configfs-tsm API for collecting the attestation report.
This is the last release to support the ioctl-based attestation report commands, though MSG_KEY_REQ will still use the Device interface. The new interfaces are now QuoteProvider and LeveledQuoteProvider, which return the raw attestation report concatenated with the certificate table. The abi.ReportCertsToProto function can translate the result into an SnpAttestation protocol buffer.
The following types and functions are marked for deletion
- GetRawReport
- GetRawReportAtVmpl
- GetReport
- GetRawExtendedReportAtVmpl
- GetExtendedReportAtVmpl
- GetExtendedReport
The SEV-SNP MSG_REPORT_REQ flexibility for selecting your attestation key is not supported by configfs-tsm, so you have to use the default key choice.
What's Changed
- Bump golang.org/x/crypto from 0.13.0 to 0.17.0 by @dependabot in #96
- Remove embedded cert warning. by @deeglaze in #98
- Add configfs-tsm support for attestation reports by @deeglaze in #99
New Contributors
- @dependabot made their first contribution in #96
Full Changelog: v0.9.3...v0.10.0