Skip to content

Commit 9ed621c

Browse files
alexmwualexmwu
authored
[launcher] Add privileged launch policy options (google#526)
[launcher] Add privileged capabilities and cgroups Added capabilities as a launch spec option allows operators to add additional capabilities to their CS workload. The corresponding launch policy allows workload authors to specify whether they want the operator to grant more privileged capabilities. Cgroup mode creates a namespaced rw cgroup mount. It also has a launch policy that allows workload authors to determine whether operators can set this policy. * Add privileged image tests Remove local since it fails bash execution
1 parent 41a04a1 commit 9ed621c

File tree

19 files changed

+1176
-195
lines changed

19 files changed

+1176
-195
lines changed

‎cmd/go.mod‎

Lines changed: 22 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,32 +1,36 @@
11
module github.com/google/go-tpm-tools/cmd
22

3-
go 1.21
3+
go 1.22
4+
5+
toolchain go1.23.4
46

57
require (
68
cloud.google.com/go/compute/metadata v0.5.2
7-
cloud.google.com/go/logging v1.11.0
8-
github.com/containerd/containerd v1.7.16
9+
cloud.google.com/go/logging v1.12.0
10+
github.com/containerd/containerd v1.7.23
911
github.com/golang-jwt/jwt/v4 v4.5.1
1012
github.com/golang/protobuf v1.5.4
1113
github.com/google/go-sev-guest v0.13.0
1214
github.com/google/go-tdx-guest v0.3.2-0.20241009005452-097ee70d0843
1315
github.com/google/go-tpm v0.9.0
1416
github.com/google/go-tpm-tools v0.4.4
1517
github.com/google/go-tpm-tools/verifier v0.4.4
16-
github.com/spf13/cobra v1.8.0
18+
github.com/spf13/cobra v1.8.1
1719
golang.org/x/oauth2 v0.23.0
18-
google.golang.org/api v0.203.0
20+
google.golang.org/api v0.205.0
1921
google.golang.org/grpc v1.67.1
2022
google.golang.org/protobuf v1.35.1
2123
)
2224

2325
require (
2426
cloud.google.com/go v0.116.0 // indirect
25-
cloud.google.com/go/auth v0.9.9 // indirect
26-
cloud.google.com/go/auth/oauth2adapt v0.2.4 // indirect
27+
cloud.google.com/go/auth v0.10.1 // indirect
28+
cloud.google.com/go/auth/oauth2adapt v0.2.5 // indirect
2729
cloud.google.com/go/confidentialcomputing v1.8.0 // indirect
2830
cloud.google.com/go/longrunning v0.6.1 // indirect
29-
github.com/containerd/ttrpc v1.2.3 // indirect
31+
github.com/containerd/errdefs v1.0.0 // indirect
32+
github.com/containerd/log v0.1.0 // indirect
33+
github.com/containerd/ttrpc v1.2.6 // indirect
3034
github.com/felixge/httpsnoop v1.0.4 // indirect
3135
github.com/go-logr/logr v1.4.2 // indirect
3236
github.com/go-logr/stdr v1.2.2 // indirect
@@ -44,14 +48,16 @@ require (
4448
github.com/googleapis/gax-go/v2 v2.13.0 // indirect
4549
github.com/inconshreveable/mousetrap v1.1.0 // indirect
4650
github.com/pkg/errors v0.9.1 // indirect
51+
github.com/prometheus/procfs v0.15.1 // indirect
4752
github.com/sirupsen/logrus v1.9.3 // indirect
4853
github.com/spf13/pflag v1.0.5 // indirect
4954
go.opencensus.io v0.24.0 // indirect
50-
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.54.0 // indirect
51-
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.54.0 // indirect
52-
go.opentelemetry.io/otel v1.29.0 // indirect
53-
go.opentelemetry.io/otel/metric v1.29.0 // indirect
54-
go.opentelemetry.io/otel/trace v1.29.0 // indirect
55+
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.56.0 // indirect
56+
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.56.0 // indirect
57+
go.opentelemetry.io/otel v1.31.0 // indirect
58+
go.opentelemetry.io/otel/metric v1.31.0 // indirect
59+
go.opentelemetry.io/otel/sdk v1.31.0 // indirect
60+
go.opentelemetry.io/otel/trace v1.31.0 // indirect
5561
go.uber.org/multierr v1.11.0 // indirect
5662
golang.org/x/crypto v0.31.0 // indirect
5763
golang.org/x/exp v0.0.0-20240531132922-fd00a4e0eefc // indirect
@@ -60,9 +66,9 @@ require (
6066
golang.org/x/sys v0.28.0 // indirect
6167
golang.org/x/text v0.21.0 // indirect
6268
golang.org/x/time v0.7.0 // indirect
63-
google.golang.org/genproto v0.0.0-20241015192408-796eee8c2d53 // indirect
64-
google.golang.org/genproto/googleapis/api v0.0.0-20241007155032-5fefd90f89a9 // indirect
65-
google.golang.org/genproto/googleapis/rpc v0.0.0-20241015192408-796eee8c2d53 // indirect
69+
google.golang.org/genproto v0.0.0-20241021214115-324edc3d5d38 // indirect
70+
google.golang.org/genproto/googleapis/api v0.0.0-20241015192408-796eee8c2d53 // indirect
71+
google.golang.org/genproto/googleapis/rpc v0.0.0-20241021214115-324edc3d5d38 // indirect
6672
)
6773

6874
replace (

‎cmd/go.sum‎

Lines changed: 43 additions & 37 deletions
Large diffs are not rendered by default.

‎go.mod‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,14 +24,14 @@ require (
2424
github.com/google/uuid v1.6.0 // indirect
2525
github.com/inconshreveable/mousetrap v1.1.0 // indirect
2626
github.com/pkg/errors v0.9.1 // indirect
27-
github.com/spf13/cobra v1.8.0 // indirect
27+
github.com/spf13/cobra v1.8.1 // indirect
2828
github.com/spf13/pflag v1.0.5 // indirect
2929
github.com/stretchr/testify v1.9.0 // indirect
3030
go.uber.org/multierr v1.11.0 // indirect
3131
golang.org/x/crypto v0.31.0 // indirect
3232
golang.org/x/exp v0.0.0-20240531132922-fd00a4e0eefc // indirect
3333
golang.org/x/net v0.30.0 // indirect
3434
golang.org/x/sys v0.28.0 // indirect
35-
google.golang.org/genproto/googleapis/rpc v0.0.0-20241015192408-796eee8c2d53 // indirect
35+
google.golang.org/genproto/googleapis/rpc v0.0.0-20241021214115-324edc3d5d38 // indirect
3636
google.golang.org/grpc v1.67.1 // indirect
3737
)

‎go.sum‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -168,7 +168,7 @@ github.com/coreos/pkg v0.0.0-20180928190104-399ea9e2e55f/go.mod h1:E3G3o1h8I7cfc
168168
github.com/cpuguy83/go-md2man v1.0.10/go.mod h1:SmD6nW6nTyfqj6ABTjUi3V3JVMnlJmwcJI5acqYI6dE=
169169
github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
170170
github.com/cpuguy83/go-md2man/v2 v2.0.0/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
171-
github.com/cpuguy83/go-md2man/v2 v2.0.3/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
171+
github.com/cpuguy83/go-md2man/v2 v2.0.4/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
172172
github.com/creack/pty v1.1.7/go.mod h1:lj5s0c3V2DBrqTV7llrYr5NG6My20zk30Fl46Y7DoTY=
173173
github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
174174
github.com/creack/pty v1.1.11/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
@@ -639,8 +639,8 @@ github.com/spf13/cobra v0.0.5/go.mod h1:3K3wKZymM7VvHMDS9+Akkh4K60UwM26emMESw8tL
639639
github.com/spf13/cobra v1.0.0/go.mod h1:/6GTrnGXV9HjY+aR4k0oJ5tcvakLuG6EuKReYlHNrgE=
640640
github.com/spf13/cobra v1.1.1/go.mod h1:WnodtKOvamDL/PwE2M4iKs8aMDBZ5Q5klgD3qfVJQMI=
641641
github.com/spf13/cobra v1.1.3/go.mod h1:pGADOWyqRD/YMrPZigI/zbliZ2wVD/23d+is3pSWzOo=
642-
github.com/spf13/cobra v1.8.0 h1:7aJaZx1B85qltLMc546zn58BxxfZdR/W22ej9CFoEf0=
643-
github.com/spf13/cobra v1.8.0/go.mod h1:WXLWApfZ71AjXPya3WOlMsY9yMs7YeiHhFVlvLyhcho=
642+
github.com/spf13/cobra v1.8.1 h1:e5/vxKd/rZsfSJMUX1agtjeTDf+qv1/JdBF8gg5k9ZM=
643+
github.com/spf13/cobra v1.8.1/go.mod h1:wHxEcudfqmLYa8iTfL+OuZPbBZkmvliBWKIezN3kD9Y=
644644
github.com/spf13/jwalterweatherman v1.0.0/go.mod h1:cQK4TGJAtQXfYWX+Ddv3mKDzgVb68N+wFjFa4jdeBTo=
645645
github.com/spf13/pflag v1.0.1/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
646646
github.com/spf13/pflag v1.0.3/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
@@ -1172,8 +1172,8 @@ google.golang.org/genproto v0.0.0-20210728212813-7823e685a01f/go.mod h1:ob2IJxKr
11721172
google.golang.org/genproto v0.0.0-20210805201207-89edb61ffb67/go.mod h1:ob2IJxKrgPT52GcgX759i1sleT07tiKowYBGbczaW48=
11731173
google.golang.org/genproto v0.0.0-20210813162853-db860fec028c/go.mod h1:cFeNkxwySK631ADgubI+/XFU/xp8FD5KIVV4rj8UC5w=
11741174
google.golang.org/genproto v0.0.0-20210821163610-241b8fcbd6c8/go.mod h1:eFjDcFEctNawg4eG61bRv87N7iHBWyVhJu7u1kqDUXY=
1175-
google.golang.org/genproto/googleapis/rpc v0.0.0-20241015192408-796eee8c2d53 h1:X58yt85/IXCx0Y3ZwN6sEIKZzQtDEYaBWrDvErdXrRE=
1176-
google.golang.org/genproto/googleapis/rpc v0.0.0-20241015192408-796eee8c2d53/go.mod h1:GX3210XPVPUjJbTUbvwI8f2IpZDMZuPJWDzDuebbviI=
1175+
google.golang.org/genproto/googleapis/rpc v0.0.0-20241021214115-324edc3d5d38 h1:zciRKQ4kBpFgpfC5QQCVtnnNAcLIqweL7plyZRQHVpI=
1176+
google.golang.org/genproto/googleapis/rpc v0.0.0-20241021214115-324edc3d5d38/go.mod h1:GX3210XPVPUjJbTUbvwI8f2IpZDMZuPJWDzDuebbviI=
11771177
google.golang.org/grpc v1.8.0/go.mod h1:yo6s7OP7yaDglbqo1J04qKzAhqBH6lvTonzMVmEdcZw=
11781178
google.golang.org/grpc v1.17.0/go.mod h1:6QZJwpn2B+Zp71q/5VxRsJ6NXXVCE5NRUHRo+f3cWCs=
11791179
google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=

‎go.work‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
go 1.21
1+
go 1.22.0
22

33
use (
44
.

0 commit comments

Comments
 (0)