fix(guest): skip TDX config check on Nitro Enclave

Author: kvinwang

dstack/dstack-util/src/system_setup/config_id_verifier.rs

@@ -94,6 +94,9 @@ fn verify_mr_config_id_for_mode(mode: TeeVariant, local: LocalMrConfigValues<'_>
         // in measure_app_info); there is no host-supplied claim to cross-check.
         // The key_provider_id pin is enforced by verify_key_provider_id.
         TeeVariant::DstackAwsNitroTpm => Ok(()),
+        // Nitro Enclave binds the image through the signed NSM document and
+        // the app ID through its runtime event. It has no TDX mr_config_id.
+        TeeVariant::DstackNitroEnclave => Ok(()),
         _ => verify_tdx_mr_config_id(local),
     }
 }
@@ -438,4 +441,23 @@ mod tests {
         };
         verify_mr_config_v3_document(&document.to_string(), local_with_script).unwrap();
     }
+
+    #[test]
+    fn nitro_enclave_does_not_require_tdx_mr_config() -> Result<()> {
+        let compose_hash = [0u8; 32];
+        let gpu_policy_hash = [0u8; 32];
+        let app_id = [0u8; 20];
+        let instance_id = [0u8; 20];
+        let local = LocalMrConfigValues {
+            compose_hash: &compose_hash,
+            gpu_policy_hash: &gpu_policy_hash,
+            init_script_hashes: &[],
+            app_id: &app_id,
+            instance_id: &instance_id,
+            key_provider: KeyProviderKind::None,
+            key_provider_id: &[],
+        };
+
+        verify_mr_config_id_for_mode(TeeVariant::DstackNitroEnclave, local)
+    }
 }