intel / intel/trustauthority-client-for-c

The tool fails on Ubuntu 24 standalone TD

Open
#1 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
7
Forks
8
PR merge metrics
No merged PRs in 30d

Description

Host OS: Ubuntu 24.04
Guest OS: Ubuntu 24.04

To setup host and guest I used the official procedure: https://github.com/canonical/tdx/blob/noble-24.04/README.md

Then I followed the [trustauthority-client-for-c README](https://github.com/intel/trustauthority-client-for-c/blob/81434c6cf7131d8d89a577af433936e485408092/examples/tdx_token/README.md) which fails on attestation:

> root@tdx-guest:~/trustauthority-client-for-c# sudo docker run -it --rm --device=/dev/tdx_guest --env-file tdx_token.env --group-add $(getent group root | cut -d: -f3) localhost:5000/taas/intel_tdx_token
[LOG:2024-06-24 14:34:55::/trustauthority-client/examples/tdx_token/tdx_token.c::122] Info: connecting to https://api.trustauthority.intel.com
[ERR:2024-06-24 14:34:55::/trustauthority-client/src/tdx/intel/tdx_adapter.c::145] Error: In tdx_att_get_quote. 0x000a
[ERR:2024-06-24 14:34:55::/trustauthority-client/examples/tdx_token/tdx_token.c::161] Error: Failed to collect evidence from adapter 0x000a

I checked with [trustauthority-client-for-go README](https://github.com/intel/trustauthority-client-for-go/blob/ee1dcd262e716a559871fbb2b3276dd591762547/tdx-cli/README.md?plain=1#L45) and confirmed it is working:

> root@tdx-guest:~/trustauthority-client-for-go/tdx-cli# ./trustauthority-cli token -c ~/config.json
2024/06/24 14:33:33 [DEBUG] GET https://api.trustauthority.intel.com/appraisal/v1/nonce
2024/06/24 14:33:35 [DEBUG] POST https://api.trustauthority.intel.com/appraisal/v1/attest
Trace Id: Z4GF_GHNoAMEB5w=
eyJhbGciOiJQUzM4NCIsImprdSI (... TOKEN ...)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.