Skip to content

nvidia: use alias for remote verifier type#1216

Merged
dcmiddle merged 1 commit intoconfidential-containers:mainfrom
manuelh-dev:mahuber/nv-remote-ver-fix
Mar 11, 2026
Merged

nvidia: use alias for remote verifier type#1216
dcmiddle merged 1 commit intoconfidential-containers:mainfrom
manuelh-dev:mahuber/nv-remote-ver-fix

Conversation

@manuelh-dev
Copy link
Contributor

Avoid having to pass capitalized NVIDIA_VERIFIER_MODE strings to deploy KBS.

I am trying to integrate the latest version of trustee into kata-containers: https://github.com/kata-containers/kata-containers/pull/12648/changes

After adjusting the NVIDIA_VERIFIER_MODE variable, I still got CI errors such as in https://github.com/kata-containers/kata-containers/actions/runs/22917620305/job/66510316119?pr=12648:

Error: invalid config: unknown variant `local`, expected `Local` or `Remote` for key `attestation_service`

Looks like this contract "broke" yesterday via: 8733c99

If you don't like the serialization alias, we would at least need to change kbs\config\kubernetes\deploy-kbs.sh, for instance, assigning Local as the default value for NVIDIA_VERIFIER_MODE when no value is present (or ensure the value is either local or remote and capitalize the first value).

Oddly enough, even after adjusting NVIDIA_VERIFIER_MODE to Remote in kata-containers, the NVIDIA GPU SNP CI failed: https://github.com/kata-containers/kata-containers/actions/runs/22917620305/job/66510316119?pr=12648

Error: invalid config: unknown variant `remote`, expected `Local` or `Remote` for key `attestation_service`

Bluntly starting at the code, I don't see where the capitalization got lost. I don't see a trace on kata side and on deploy-kbs.sh side, the capital R version should have been utilized.

@dcmiddle
Copy link
Member

@Xynnn007 ptal

Copy link
Member

@Xynnn007 Xynnn007 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Member

@fitzthum fitzthum left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@Xynnn007
Copy link
Member

@manuelh-dev might need a rebase for the latest fix

Avoid having to pass capitalized NVIDIA_VERIFIER_MODE strings to
deploy KBS.

Signed-off-by: Manuel Huber <manuelh@nvidia.com>
@manuelh-dev manuelh-dev force-pushed the mahuber/nv-remote-ver-fix branch from dcc13f0 to 14ed3ba Compare March 11, 2026 19:44
@dcmiddle dcmiddle merged commit f5cb8fc into confidential-containers:main Mar 11, 2026
47 of 48 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants