Skip to content

Commit e9e8a4f

Browse files
authored
Add event parsing logic for GPU device specific event (#561)
1 parent c4af8b0 commit e9e8a4f

File tree

5 files changed

+393
-204
lines changed

5 files changed

+393
-204
lines changed

cel/cos_tlv.go

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -44,6 +44,7 @@ const (
4444
// EventContent is empty on success, or contains an error message on failure.
4545
LaunchSeparatorType
4646
MemoryMonitorType
47+
GpuCCModeType
4748
)
4849

4950
// CosTlv is a specific event type created for the COS (Google Container-Optimized OS),

proto/attest.proto

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -191,11 +191,29 @@ message HealthMonitoringState {
191191
optional bool memory_enabled = 1;
192192
}
193193

194+
// Confidential Computing mode for GPU device. Reference for these CC mode values: https://developer.nvidia.com/blog/confidential-computing-on-h100-gpus-for-secure-and-trustworthy-ai/#hardware_security_for_nvidia_h100_gpus
195+
enum GPUDeviceCCMode {
196+
UNSET = 0;
197+
// The NVIDIA H100 hardware, firmware, and software have fully activated all the confidential computing features.
198+
ON = 1;
199+
// None of the confidential computing-specific features are active.
200+
OFF = 2;
201+
// The GPU is in a partial CC mode that will match the workflows of CC mode ON, but with security protections disabled.
202+
DEVTOOLS = 3;
203+
}
204+
205+
message GpuDeviceState {
206+
// Whether Confidential Computing mode is enabled for GPU.
207+
GPUDeviceCCMode cc_mode = 1;
208+
}
209+
210+
194211
message AttestedCosState {
195212
ContainerState container = 1;
196213
SemanticVersion cos_version = 2;
197214
SemanticVersion launcher_version = 3;
198215
HealthMonitoringState health_monitoring = 4;
216+
GpuDeviceState gpu_device_state = 5;
199217
}
200218

201219
message EfiApp {

0 commit comments

Comments
 (0)