CCF
CCF copied to clipboard
Release and packaging for SEV-SNP
Once #4068 is complete, we should release a separate package and docker image of CCF so that it can be deployed in ACI, without requiring Open Enclave:
- [ ] 1. Decide on scheme for SEV-SNP CCF variants. Either a compile-time value for a new target, or a new configuration value (i.e.
enclave.secure: true/falsewhich defaults totrue) to make sure that operators do not deploy virtual, insecure nodes by mistake. - [ ] 2. Release new
ccf/app/devandccf/app/rundocker images, without existing SGX/Open Enclave dependencies
It's also worth noting we should probably update the sample constitutions to allow operators to manage the tables used in SNP attestation
@DomAyre I think we've done most of that, except perhaps the binary decoration? I think we want to close this before 3.0 final, and so this effectively should become p0.