Add AWS EC2 NitroTPM attestation and guest OS support#753
Draft
h4x3rotab wants to merge 3 commits into
Draft
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
h4x3rotab
force-pushed
the
aws-attestation-platform-spec
branch
6 times, most recently
from
d6fb1cd to
504e342
Compare
2 tasks
h4x3rotab
force-pushed
the
aws-attestation-platform-spec
branch
from
504e342 to
420ea41
Compare
Adds the AWS EC2 NitroTPM platform path for dstack under the account-admin-untrusted threat model, integrated the same way AMD SEV-SNP is rather than with AWS-specific contract/auth/systemd surface. - NitroTPM attestation-document parsing, verification against the AWS Nitro PKI, PCR replay, PCR14 launch measurement and PCR23 runtime measurement, and platform-specific verifier/API output. - Reuses the on-chain authorization contract unchanged: a verified NitroTPM attestation has no TDX/SNP-style TCB surface, so the KMS and verifier normalize it to tcbStatus="UpToDate" (the same way SEV-SNP normalizes its own status) and it passes the standard gate. No AWS-specific on-chain fields. - Optional allowed_attestation_modes kms.toml allowlist for SNP-style per-platform operator control (empty allows every verified mode). - Attested recipient-key handling for app-key release without relying on AWS KMS; freshness/replay policy checks and RA-TLS endpoint identity verification. - auth-simple and auth-eth policy support, production verifier runbook, reproducibility manifests, AMI promotion + EC2 live-smoke helpers, and committed AWS live-smoke evidence. - App trust model matches TDX/SEV-SNP: app code (init_script, pre_launch_script, docker-compose) is measured into the on-chain-whitelisted identity and replayed into non-resettable PCR14, so no compose filter or device sandbox is used. Rebased onto master (squashed); integrates with the tdx-measurement-attestation changes in #742. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
kvinwang
force-pushed
the
aws-attestation-platform-spec
branch
from
420ea41 to
41f9b7e
Compare
kvinwang
changed the title
kvinwang
force-pushed
the
aws-attestation-platform-spec
branch
from
41f9b7e to
41a4aa1
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds the complete AWS EC2 NitroTPM platform path under the account-admin-untrusted threat model. This PR now combines the former dstack#753 implementation with the Yocto image changes from Dstack-TEE/meta-dstack#79.
Attestation and key release
Guest OS
dstack-awsYocto kernel feature with built-in NVMe, ENA, UEFI/GPT, serial-console, and TPM CRB support;tpm2-tssto the dstack guest recipe build dependencies;os/yocto/tools/aws/and formal documentation underdocs/.Operations and documentation
--repo) rather than separate dstack/meta-dstack checkouts.Validation
cargo test -p dstack-attest aws_nitro_tpmcargo test -p dstack-kms aws_nitro_tpmcargo test -p dstack-verifier awscargo test -p dstack-guest-agent -p dstack-guest-agent-simulator -p ra-tls -p tpm-attest -p tpm-qvlnpm run test:runandnpm run lintindstack/kms/auth-simplebash -n/shellcheckthroughprek run --all-filesreuse lintforge test --ffiwas not rerun locally because Foundry is not installed in this environment; CI covers the Foundry suite.