v0.8.0
What's Changed
- Add unit test case for unencrypted images by @portersrc in #287
- ci: refactor workflows by @katexochen in #275
- chore(deps): Bump actions/checkout from 2 to 3 by @dependabot in #176
- aa: Rename Occlum attester to SGX attester and add Gramine support to it by @mythi in #167
- attestation-agent/Attesters: refactor the trait of Attester by @Xynnn007 in #284
- Unify common deps to the same version in Cargo.toml of the worksppace by @Xynnn007 in #285
- Update base64 crate in guest-components by @Xynnn007 in #282
- image-rs: add image block device dm-verity and mount by @ChengyuZhu6 in #270
- ci: enable image-rs rust lint check for all features by @arronwy in #291
- aa: sgx-attester: update occlum_dcap to a tagged version by @mythi in #289
- chore(deps): Update strum requirement from 0.24 to 0.25 by @dependabot in #293
- image-rs: refine implementation of dm-verity by @jiangliu in #294
- chore(deps): Update strum_macros requirement from 0.24 to 0.25 by @dependabot in #297
- image-rs: add sha1 hash algorithm support in dm-verity by @ChengyuZhu6 in #300
- Provide builder for KBS Protocol Wrapper by @mkulke in #278
- Confidential-Datahub API definition and Sealed Secrets by @Xynnn007 in #288
- Added two security enhancements to AA by @jialez0 in #273
- Made Attester trait's get_evidence() async by @mkulke in #299
- image pull tests: replace image ref by @Xynnn007 in #301
- Add panic with error msg when test-async-pull-client fails by @portersrc in #303
- Update commands to generate test image and remove duplicated test case by @arronwy in #305
- image-rs: Fix the flaky CI with assert_retry by @arronwy in #306
- image-rs: change fallback kbs_uri from localhost to http://localhost by @mkulke in #308
- chore(deps): Update tonic-build requirement from 0.8.0 to 0.9.2 by @dependabot in #302
- chore(deps): Update env_logger requirement from 0.9.0 to 0.10.0 by @dependabot in #310
- kbs_protocol: use rusttls when rust-crypto feature is enabled by @mythi in #307
- chore(deps): Update oci-spec requirement from 0.5.8 to 0.6.2 by @dependabot in #311
- Refactor kbs client by @Xynnn007 in #304
- image-rs: enclave-cc updates by @mythi in #312
- chore(deps): Update async-compression requirement from 0.3.15 to 0.4.1 by @dependabot in #313
- Kbs protocol fix cargo toml by @Xynnn007 in #315
- Confidential DataHub Part 2: KMS support and unseal secret with KMS by @Xynnn007 in #309
- chore(deps): Update shadow-rs requirement from 0.5.25 to 0.23.0 by @dependabot in #316
- Fix: Initialization of tee type is lacked in get_token API by @jialez0 in #320
- Confidential DataHub Part 3: Define Vault API & Support GetResource API with KBS-Client & Sev support by @Xynnn007 in #319
- verity: support parsing options from remote snapshotter by @ChengyuZhu6 in #317
- Add initial support for a hygon csv attester by @BaoshunFang in #323
- Confidential DataHub Part 4: CDH binary & Attestation API for AA by @Xynnn007 in #322
- image: Add a function to get image name from remote by @ChengyuZhu6 in #324
- cargo: Fix the build dependency for eaa_kbc by @arronwy in #327
- image-rs: Update loopdev to latest master by @surajssd in #328
- image-rs: add feature gate for verity by @ChengyuZhu6 in #331
- Remove git reference for sev by @emanuellima1 in #334
- Initial implementation rest api server for CoCo by @arronwy in #325
- versions: Downgrade clap by @stevenhorsman in #337
- versions: Add tilde to clap dependency by @stevenhorsman in #339
- Fix enclave-cc dep by @Xynnn007 in #335
- ci: Use toolchain match the kata to replace the beta by @arronwy in #338
- aa/attester: Update csv-rs dep to rev bcf3bcc. by @BaoshunFang in #342
- Verity: Redefine functions to support kata by @ChengyuZhu6 in #343
- aa/attester: Update csv-rs dep to rev 05fbacd. by @BaoshunFang in #348
- Add Cargo.lock for consistent builds by @beraldoleal in #344
- workflows: Bump to rust 1.72 by @stevenhorsman in #356
- New tee type: CCA (Confidential Compute Architecture) by @chendave in #321
- Api server rest makefile by @stevenhorsman in #358
- Read agent config from file by @stevenhorsman in #365
- Fix cc kbc aa param config file parsing by @stevenhorsman in #368
- attestation-agent: fix extraction of peerpod kbs host addr extraction in token code by @mkulke in #371
- api-server-rest: fix aa_addr cli param by @mkulke in #370
- image-rs: Support simple signing with X-R-S-S by @mattarnoatibm in #372
- cdh/kms/kbs: raise warning when failed to read file for offline-fs-kbc by @Xynnn007 in #374
- Fix Aliyun KMS suite by @Xynnn007 in #376
- cdh/kms: add rustls-tls feature for aliyun by @Xynnn007 in #377
- Fix CDH & kbs_protocol by @Xynnn007 in #381
- chore(deps): Bump docker/login-action from 2 to 3 by @dependabot in #362
- chore(deps): Bump docker/build-push-action from 4 to 5 by @dependabot in #363
- ci: disable eaa-kbc ci for PR and Merge by @Xynnn007 in #386
- chore(deps): Bump actions/checkout from 3 to 4 by @dependabot in #351
New Contributors
- @ChengyuZhu6 made their first contribution in #270
- @BaoshunFang made their first contribution in #323
- @emanuellima1 made their first contribution in #334
- @beraldoleal made their first contribution in #344
- @chendave made their first contribution in #321
Full Changelog: v0.7.0...v0.8.0