Releases: intel/MigTD
MigTD v0.6.0 Release
What's Changed
- build(deps): bump github/codeql-action from 3.29.10 to 3.29.11 by @dependabot[bot] in #438
- changes to support hashtool and enrollment on IGVM by @mgudaram in #435
- build(deps): bump ubuntu from
7c06e91tof3b7f1bin /container by @dependabot[bot] in #441 - build(deps): bump ubuntu from
f3b7f1bto9cbed75in /container by @dependabot[bot] in #442 - build(deps): bump aquasecurity/trivy-action from 0.32.0 to 0.33.1 by @dependabot[bot] in #444
- build(deps): bump github/codeql-action from 3.29.11 to 3.30.1 by @dependabot[bot] in #445
- Support OneShot APIC timer for windows by @mgudaram in #443
- Fix fuzz test workflow by @liuw1 in #450
- Fixing WFR as per GHCI 1.5 spec & status field extended to 8 bytes by @mjjagasi in #447
- build(deps): bump github/codeql-action from 3.30.1 to 3.30.3 by @dependabot[bot] in #446
- build(deps): bump ubuntu from
9cbed75to590e57ain /container by @dependabot[bot] in #449 - build(deps): bump ubuntu from
590e57ato353675ein /container by @dependabot[bot] in #451 - vsock: prevent recv() returning 0 on non-data packets by @gaojiaqi7 in #456
- vsock: fix issues with large chunk transmission by @gaojiaqi7 in #455
- add collateral generator tool in json by @gaojiaqi7 in #400
- Support engine-svn mapping and signing by @gaojiaqi7 in #414
- policy: support collaterals by @gaojiaqi7 in #416
- tools: introduce servtd-collateral-generator and json-signer / extend migtd-policy-generator by @gaojiaqi7 in #457
- Support v2 policy and signing by @gaojiaqi7 in #415
- Support v2 policy strategy to include collateral and svn-mapping by @gaojiaqi7 in #420
- Test: Add fuzzing test for virtio serial by @liuw1 in #410
- build(deps): bump ubuntu from
353675etofdb6c9cin /container by @dependabot[bot] in #465 - build(deps): bump github/codeql-action from 3.30.3 to 3.30.6 by @dependabot[bot] in #467
- build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @dependabot[bot] in #466
- build(deps): bump KyleMayes/install-llvm-action from 2.0.7 to 2.0.8 by @dependabot[bot] in #479
- build(deps): bump ubuntu from
fdb6c9cto728785bin /container by @dependabot[bot] in #476 - build(deps): bump github/codeql-action from 3.30.6 to 4.30.8 by @dependabot[bot] in #480
- build(deps): bump ubuntu from
728785bto66460d5in /container by @dependabot[bot] in #485 - policy: remove unsafe unwraps/panics by @gaojiaqi7 in #481
- policy: correct the returned error by @gaojiaqi7 in #483
- policy: fix typo by @gaojiaqi7 in #484
- Add test cases of policy V2 into CI by @liuw1 in #473
- Support GetReportData and additional GHCI 1.5 changes by @mgudaram in #477
- build(deps): bump github/codeql-action from 4.30.8 to 4.30.9 by @dependabot[bot] in #493
- doc: add policy v2 guide by @gaojiaqi7 in #491
- Fix cargo clippy warnings for attestation. by @IntelCaisui in #494
- policy: check the input of
hex_string_to_bytesby @gaojiaqi7 in #495 - policy: do sanity checks in
RawPolicyData::verifyby @gaojiaqi7 in #496 - migtd: use policy version in tagged event data by @gaojiaqi7 in #492
- Update collaterals implementation by @gaojiaqi7 in #489
- deps: update linux-sgx submodule to
migtd_2.26by @gaojiaqi7 in #490 - Add Spdm Attestation support for migtd by @IntelCaisui in #488
- config: add a policy issuer chain template by @gaojiaqi7 in #501
- migtd: fix tcb_date and tcb_status offset in suppl data by @gaojiaqi7 in #498
- CI: add policy v2 build by @gaojiaqi7 in #502
- config: update image layout and metadata by @gaojiaqi7 in #507
- build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #517
- Spdm attestation should check event_log received during attestation by @IntelCaisui in #504
- Fix CI SPDM test build to build test bin with spdm_attestation feature by @IntelCaisui in #506
- virtio-serial: correct logic to avoid infinite loop by @gaojiaqi7 in #511
- build(deps): bump github/codeql-action from 4.30.9 to 4.31.0 by @dependabot[bot] in #516
- Fix to GHCI 1.5 vmcall-raw reportstatus status field by @mgudaram in #487
- Add ci spdm test spdm serial by @IntelCaisui in #515
- migtd: adjust memory layout and concurrency limit by @gaojiaqi7 in #510
- Fix illegal access of missed fields under vmcall-raw feature with spdm by @IntelCaisui in #524
- Need to check the reserved byte of VMCALLMSG in SPDM by @IntelCaisui in #526
- CI: Cover more build scenarios by @liuw1 in #513
- Fix SPDM_CONFIG env. variable setting in build command by @bodzhang in #523
- Check VDM version in SPDM VDM messages by @IntelCaisui in #525
- spdm add const defs for vdm messages by @IntelCaisui in #531
- Reduce unwrap use and improve error handling in SPDM module by @IntelCaisui in #532
- add ci spdm with pilicy v2 by @IntelCaisui in #533
- CI: add policy v2 integration test by @gaojiaqi7 in #512
- migtd: remove root CA from CFV for policy v2 by @gaojiaqi7 in #540
- build(deps): bump github/codeql-action from 4.31.0 to 4.31.2 by @dependabot[bot] in #541
- Add check to avoid panic from slice out of bounds and integer overflow by @IntelCaisui in #544
- tools: support migtd hash calculation with policy_v2 enabled by @gaojiaqi7 in #542
- CI: Optimize integration test by @liuw1 in #537
- Fix Transport Layer for SPDM Messages Receiving by @IntelCaisui in #549
- feat: Add Azure CVM Emulation (AzCVMEmu) support for development and testing by @bodzhang in #529
- tools/migtd-collateral-generator: fix typo by @haitaohuang in #550
- Add get_quote implementation for igvm. by @agokarn in #547
- tools: Support migtd-hash to output TD Info and served_td/servtd_info_hash in JSON format by @mingweishih in #546
- vsock: fix async issues by @gaojiaqi7 in #555
- Reduce Memory usage for spdm attestation. by @IntelCaisui in #552
- Tune the spdm config to reduce memory usage by @IntelCaisui in #554
- Supppot test disable RA and accept all with spdm by @IntelCaisui in #558
- Use Box pin to more futures to avoid unnecessary stack consumption by @IntelCaisui in #560
- Add doc for steps to benchmark memory usage of SPDM attestation for multi sessions by @IntelCaisui in #557
- migtd: unify the memory layout for TLS and SPDM by @IntelCaisui in #561
- Add a Makefile to build MigTD with igvm format. by @agokarn in #559
- Fix GetQuote emulation: place response after GHCI header by @bodzhang in #562
- Add alloc_shared_pages support for AzCVMEmu mode by @bodzhang in #564
- policy: validate required FMSPC and TCB evaluation number fields by @gaojiaqi7 in #565
- Support Logging for vmcall-raw feature by @mgudaram in #528
- changes to support guest crash msr updates for vmcall-raw by @mgudaram in #551
- Update the memory layout with new test results. by @IntelCaisui in #567
- build(deps): bump ubuntu from
66460d5toe96e81fin /container by @dependabot[bot] in #573 - policy: move event log definiti...
MigTD v0.5.1 Release
What's Changed
- Not invoking query command for vmcall-raw feature by @mjjagasi in #397
- build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @dependabot[bot] in #396
- build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in #399
- build(deps): bump ubuntu from
6015f66tob59d215in /container by @dependabot[bot] in #401 - config: remove unused file by @gaojiaqi7 in #402
- build(deps): bump aquasecurity/trivy-action from 0.30.0 to 0.31.0 by @dependabot[bot] in #405
- build(deps): bump github/codeql-action from 3.28.18 to 3.29.0 by @dependabot[bot] in #407
- build(deps): bump github/codeql-action from 3.29.0 to 3.29.2 by @dependabot[bot] in #411
- build(deps): bump ubuntu from
b59d215to440dcf6in /container by @dependabot[bot] in #412 - build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.11 to 2.0.12 by @dependabot[bot] in #409
- build(deps): bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 by @dependabot[bot] in #413
- build(deps): bump ubuntu from
440dcf6toc4570d2in /container by @dependabot[bot] in #418 - build(deps): bump ubuntu from
c4570d2toa08e551in /container by @dependabot[bot] in #419 - build(deps): bump github/codeql-action from 3.29.2 to 3.29.3 by @dependabot[bot] in #421
- config: update migration policy by @gaojiaqi7 in #423
- Fix vmcall-raw build error by @bodzhang in #422
- build(deps): bump github/codeql-action from 3.29.3 to 3.29.5 by @dependabot[bot] in #424
- build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #427
- migtd: limit concurrent requests in WFR task by @gaojiaqi7 in #428
- build(deps): bump github/codeql-action from 3.29.7 to 3.29.8 by @dependabot[bot] in #426
- build(deps): bump ubuntu from
a08e551to7c06e91in /container by @dependabot[bot] in #431 - Enhance migtd-hash tool. by @jyao1 in #403
- Add reviewer by @jyao1 in #432
- xtask: add igvm support by @dabron in #406
- build(deps): bump github/codeql-action from 3.29.8 to 3.29.10 by @dependabot[bot] in #433
- build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.12 to 2.0.13 by @dependabot[bot] in #434
- Add clarification for servtd_tdx_quote_suppl_data definition. by @jyao1 in #436
- Bump version to v0.5.1 by @liuw1 in #437
New Contributors
Full Changelog: v0.5.0...v0.5.1
MigTD v0.5.0 Release
Release content:
- Update production policy
- migtd: ghci 1.5 spec implementation
- migtd: do not parse socket info HOB when vsock is not used
- attestation: getting quote without VMM notification
Known issues:
- No known issue
For detailed changes please refer to https://github.com/intel/MigTD/issues?q=is%3Aissue+is%3Aclosed
MigTD v0.4.9 Release
Release content:
- Update pre-production and production policy
- migtd: check invalid GUIDed HOB response from VMM
- migtd: public read_mig_info and move it to data module
- Resolve clippy warnings
- Fix toolchain and add pytest to docker
- migtd-hash: support test images that disable attestation
Known issues:
- No known issue
For detailed changes please refer to https://github.com/intel/MigTD/issues?q=is%3Aissue+is%3Aclosed
MigTD v0.4.8 Release
Release content:
- Concurrent Migration Support
- upgrade td-shim
- upgrade rustls to 0.23.20
- remove nightly features and switch to stable toolchain
- several bug fix
Known issues:
• No known issue
For detailed changes please refer to https://github.com/intel/MigTD/issues?q=is%3Aissue+is%3Aclosed
MigTD v0.4.7 Release
Release content:
- Update production policy
- switch to no_std rustls
- vsock: add buffer space management
- fix readme
- remove unused functions in attestation and crypto
Known issues:
• No known issue
For detailed changes please refer to https://github.com/intel/MigTD/issues?q=is%3Aissue+is%3Aclosed
MigTD v0.4.6 Release
Release content:
- Update pre-production and production policy
- Upgrade rustls to version v0.22.4
- Upgrade crate der and hashbrown
- Fix MSI-X table offset by masking off the BIR bits
Known issues:
- No known issue
For detailed changes please refer to https://github.com/intel/MigTD/issues?q=is%3Aissue+is%3Aclosed
MigTD v0.4.5 Release
Release content:
- Update pre-production and production policy
- Remove dependency on lexical crates
Known issues:
- No known issue
For detailed changes please refer to https://github.com/intel/MigTD/issues?q=is%3Aissue+is%3Aclosed
MigTD v0.4.4 Release
Release content:
- Fix some AI detected bugs and update documents
- migtd: fix build of test_disable_ra_and_accept_all feature
Known issues:
- No known issue
For detailed changes please refer to https://github.com/intel/MigTD/issues?q=is%3Aissue+is%3Aclosed
MigTD v0.4.3 Release
Release content:
- migtd: mask the xfam and attribute
- migtd: add missing \n for log
Known issues:
- No known issue
For detailed changes please refer to https://github.com/intel/MigTD/issues?q=is%3Aissue+is%3Aclosed