intel / ccc-linux-guest-hardening

Linux Security Hardening for Confidential Compute
https://intel.github.io/ccc-linux-guest-hardening-docs
MIT License
66 stars 14 forks source link

Update docs + pipeline for upstream kAFL #79

Open il-steffen opened 1 year ago

il-steffen commented 1 year ago

Current CCC/SDV setup is based on kAFL v0.5 release:

https://github.com/intel/ccc-linux-guest-hardening/blob/b48544f3056f021c38def01fffbd4cfd37a73e21/deploy/roles/bkc/meta/main.yml#L5 https://github.com/intel/ccc-linux-guest-hardening/blob/b48544f3056f021c38def01fffbd4cfd37a73e21/deploy/requirements.yml#L5

Need to rebase the tdx branches and update scripts/docs for new merged kafl commandline.

Perhaps also use the chance to use more consistent branch names as outlined e.g. in https://github.com/IntelLabs/kafl.qemu/blob/master/README.md: For each kAFL repo, rename current kafl_stable_tdx to tdx-v0.5 or ccc-v0.5 and add a ccc-next branch to follow the current/latest master branch.