Feature: Boot the CVM based on the COCONUT-SVSM and fetch the attestation report

[danko-miladinovic]

Is your feature request related to a problem? Please describe.

We are moving forward with vTPM support. We will use COCONUT-SVSM for vTPM. The goal of this task to fetch the vTPM attestation along with SEV-SNP attestation, and to understand the values of PCR registers. Try to fetch the vTPM attestation using go-tpm-tools.

Describe the feature you are requesting, as well as the possible use case(s) for it.

The vTPM will be used to store the hashes of OVMF, kernel, initramfs and kernel command line. The hashes will be stored in PCR registers. The first step is to boot a confidential VM (CVM) with the vTPM and interact with the vTPM.

Deliverable

• Successful boot of CVM with coconut-SVSM vTPM support
• Code using go-tpm tools to connect to vTPM, retrieve attestation, and read PCR values
• Document PCR values and possible challenges

Indicate the importance of this feature to you.

Must-have

Anything else?

No response