experiment: Confidential Computing - #13776

Draft

achimnol wants to merge 208 commits into

mainfrom

experiment/confidential-computing

Commits on Aug 4, 2026

Commits on Aug 5, 2026

Commits on Aug 6, 2026

confidential: let one reference value carry rtmr_2 as a list
hhoikoo
committed
c8ba580
Merge cc/close-release-gate into experiment/confidential-computing
hhoikoo
committed
f78b94d
Merge cc/deploy-drain-scoping into experiment/confidential-computing
hhoikoo
committed
20395e3
Merge cc/nonce-claim-lease into experiment/confidential-computing
hhoikoo
committed
2229dc9
Merge branch 'cc/guest-egress' into cc/deploy-drain-scoping
rebuild
committed
e4f52d5
confidential: raise the interim admission belt above one session per image
hhoikoo
committed
77f5190
broker: expose the release-policy lint as its own subcommand
hhoikoo
committed
6b520b6
confidential: make the catalogue reader work on an encrypted folder
hhoikoo
committed
7f3b121
credential-broker: keep an untrusted clock from killing the renewal thread
hhoikoo
committed
de75657
manager: read the session download request out of its body
hhoikoo
committed
fb6f696
client: skip a ciphertext entry whose name will not decode
hhoikoo
committed
8eb2fdd
Merge branch 'cc/deploy-drain-scoping' into experiment/confidential-computing
hhoikoo
committed
eeb8431
control-plane: point the backup tools at the bundle's own database socket
devops
committed
4f82eef
control-plane: point the backup tools at the bundle's own database socket
hhoikoo
committed
8a1d3bc
credential-broker: keep an untrusted clock from killing the renewal thread
hhoikoo
committed
5194ff7
control-plane: tell an unreachable key broker apart from a refused release
hhoikoo
committed
d244d93
control-plane: answer the hypervisor's request for a clean shutdown
hhoikoo
committed
3c3c89c
control-plane: name the revision a measured image was built from
hhoikoo
committed
593b471
guest-image: mount a legacy folder without asking gocryptfs to daemonise
hhoikoo
committed
f341702
storage: honour a guest fsync and report the encrypted geometry
hhoikoo
committed
c15bbe8
image: carry the session image's process configuration to the agent
hhoikoo
committed
0e65285
control-plane: give the backup tools a datastore password to present
hhoikoo
committed
1b433cc
Merge cc/deploy-drain-scoping into experiment/confidential-computing
hhoikoo
committed
00398ac
Merge cc/control-plane-cvm into experiment/confidential-computing
hhoikoo
committed
2ce367d
confidential: release a layer key encryption key to the image it belongs to
hhoikoo
committed
585ed64
Merge cc/deploy-drain-scoping into experiment/confidential-computing
hhoikoo
committed
9532e01
confidential: mint a launch nonce from a credential the tenant signed
hhoikoo
committed
446a579
guest-image: verify the image signature and the broker that signs the token
hhoikoo
committed
62e558d
credential-broker: keep the decision log on the encrypted state volume
hhoikoo
committed
de48060
control-plane: give the benchmark and restore paths their credentials
hhoikoo
committed
0b74225
manager: dispatch app-streaming status to the event-dispatcher idle checkers
hhoikoo
committed
172c6b9
control-plane: stop the benchmark unit killing itself through the broker
hhoikoo
committed
8bb7587
control-plane: give the event bus an explicit working directory
hhoikoo
committed
b3540a3
Merge cc/control-plane-cvm into experiment/confidential-computing
hhoikoo
committed
128cab9
Merge cc/deploy-drain-scoping into experiment/confidential-computing
hhoikoo
committed
56d1884

Commits on Aug 7, 2026

Commits on Aug 14, 2026