From: Lennart Poettering <lennart@amutable.com>
Date: Mon, 22 Jun 2026 21:02:58 +0000 (+0200)
Subject: report: add systemd-report-sign-tsm backend (#42683)
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7e045f9c39ac6cbb0b087fda6b06d2aa82416d76;p=thirdparty%2Fsystemd.git

report: add systemd-report-sign-tsm backend (#42683)

Add tsm_report_acquire(), a thin wrapper around the kernel's
/sys/kernel/config/tsm/report/ configfs interface for fetching a
confidential-computing attestation report (SEV-SNP, TDX, ...), including
a caller supplied input.

A report signing backend that returns a confidential-computing
attestation report obtained via configfs-tsm. Implements
io.systemd.Report.Signer.Sign(): embeds the digest as the report's
inblob and returns the outblob (plus provider and any aux/manifest
blobs). Wired up as the "tsm" mechanism with a socket-activated service.
---

7e045f9c39ac6cbb0b087fda6b06d2aa82416d76