Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deployment/README.md: Update the serial number and link of the plugin #5

Merged
merged 1 commit into from
Feb 23, 2024
Merged

deployment/README.md: Update the serial number and link of the plugin #5

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions deployment/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,20 +6,20 @@ CCNP is designed for collecting confidential computing primitives in cloud nativ

Before moving forward, please make sure you have a TD booted. The CCNP service installation will happen in the TD.

You can use [cvm image rewriter](../../tools/cvm-image-rewriter/README.md) to prepare a TD enlightened guest image.
You can use [cvm image rewriter](../tools/cvm-image-rewriter/README.md) to prepare a TD enlightened guest image.

**NOTE:**
- If your initial guest image already has a TDX kernel, it's required to run [plugin](../../tools/cvm-image-rewriter/pre-stage/) 08 and 09 to set device access permission.
- If your initial guest image is a normal Ubuntu guest image, it's required to run [plugin](../../tools/cvm-image-rewriter/pre-stage/) 05 to install TDX kernel and then 08, 09 to set device access permission.
- If your initial guest image already has a TDX kernel, it's required to run [plugin](../tools/cvm-image-rewriter/plugins/) 07 and 08 to set device access permission.
- If your initial guest image is a normal Ubuntu guest image, it's required to run [plugin](../tools/cvm-image-rewriter/plugins/) 06 to install TDX kernel and then 07, 08 to set device access permission.

Start a TD using [qemu-test.sh](../../tools/cvm-image-rewriter/qemu-test.sh) or [start-virt.sh](../../tools/cvm-image-rewriter/start-virt.sh).
Start a TD using [qemu-test.sh](../tools/cvm-image-rewriter/qemu-test.sh) or [start-virt.sh](../tools/cvm-image-rewriter/start-virt.sh).

- Use `qemu-test.sh`, please use `-q <vsock/tdvmcall>` to make sure get quote works for the TD.
```
$ sudo ./qemu-test.sh -i output.qcow2 -t td -p <qemu monitor port> -f <ssh_forward port> -q tdvmcall
```

- Use `start-virt.sh`. The Libvirt XML template is [tdx-libvirt-ubuntu-host.xml.template](../../tools/cvm-image-rewriter/tdx-libvirt-ubuntu-host.xml.template). It uses `vsock` for getting quote.
- Use `start-virt.sh`. The Libvirt XML template is [tdx-libvirt-ubuntu-host.xml.template](../tools/cvm-image-rewriter/tdx-libvirt-ubuntu-host.xml.template). It uses `vsock` for getting quote.
```
$ sudo ./start-virt.sh -i <guest image>
```
Expand All @@ -28,7 +28,7 @@ Start a TD using [qemu-test.sh](../../tools/cvm-image-rewriter/qemu-test.sh) or

Run script [build.sh](../container/build.sh) to generate CCNP images. It will generate 5 images and push them to user specific registry.

Learn more details in the [README.md](../../container/README.md).
Learn more details in the [README.md](../container/README.md).

_NOTE: The scripts need to run on a server with docker installed._

Expand Down
Loading