Aurélien Bombo

kata-packages-uvm-coco: add e2fsprogs dependency

1

###### Merge Checklist **All** boxes should be checked before merging the PR *(just tick any boxes which don't apply to this PR)* - [x] The toolchain has been rebuilt successfully...

###### Merge Checklist **All** boxes should be checked before merging the PR *(just tick any boxes which don't apply to this PR)* - [ ] The toolchain has been rebuilt...

ci: Run zizmor for GHA security analysis

5

This runs the zizmor security lint [1] on our GH Actions. The initial workflow uses [2] as a base. [1] https://docs.zizmor.sh/ [2] https://docs.zizmor.sh/usage/#use-in-github-actions

coco: Implement trusted ephemeral data storage

8

This implements trusted ephemeral data storage as originally proposed in confidential-containers/confidential-containers#247. High-level overview: * Augments the Kata direct volume assignment API to support receiving new options `confidential` and `ephemeral` from...

runtime: virtio-fs: Support "metadata" cache mode

3

The Rust virtiofsd supports a "metadata" cache mode [1] that wasn't present in the C version [2], so this PR adds support for that. [1] https://gitlab.com/virtio-fs/virtiofsd [2] https://qemu.weilnetz.de/doc/5.1/tools/virtiofsd.html#cmdoption-virtiofsd-cache