search

confidential-containers / guest-components

Confidential Containers Guest Tools and Components
Apache License 2.0
83 stars 95 forks source link

AA | Fix the idempotence of eventlog #807

Open Xynnn007 opened 2 weeks ago

Xynnn007 commented 2 weeks ago

This patch fixes the idempotence of eventlog. Before this, when AA restarts and eventlog is activated, the originally recorded aael will be truncated and the INIT event will be recorded repeatedly. This patch will check whether there is an existing AAEL when AA is restarted. If so, it will skip creating and recording the INIT event.

At the same time, a synchronization mechanism is used to ensure that RTMR expansion will not occur repeatedly after AA abnormally interrupts execution.

Close #803

dcmiddle commented 2 weeks ago

fyi, @mythi @binxing for abnormal logger behavior and implications for how logs and events are managed.