Bug 2327780

Summary: Review Request: rust-az-snp-vtpm - Attestation Library for Azure AMD SEV-SNP Confidential Virtual Machines
Product: [Fedora] Fedora Reporter: Uri Lublin <uril>
Component: Package ReviewAssignee: Cole Robinson <crobinso>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: rawhideCC: crobinso, package-review
Target Milestone: ---Keywords: AutomationTriaged
Target Release: ---Flags: crobinso: fedora-review+
Hardware: All   
OS: Linux   
URL: https://crates.io/crates/az-snp-vtpm
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-02-24 17:47:47 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2327778    
Bug Blocks: 2328647    

Description Uri Lublin 2024-11-21 11:37:14 UTC
Spec URL: https://download.copr.fedorainfracloud.org/results/uril/trustee-attester/fedora-rawhide-x86_64/08272764-rust-az-snp-vtpm/rust-az-snp-vtpm.spec
SRPM URL: https://download.copr.fedorainfracloud.org/results/uril/trustee-attester/fedora-rawhide-x86_64/08272764-rust-az-snp-vtpm/rust-az-snp-vtpm-0.7.0-1.fc42.src.rpm
Description: Enables getting confidential computing information from the
hardware/firmware, when running on a confidential VM (CVM) with AMD SEV-SNP on Azure.
The confidential computing "evidence" is used for attestation.

A part of https://github.com/kinvolk/azure-cvm-tooling/

Fedora Account System Username: uril

Comment 1 Uri Lublin 2024-12-04 15:39:48 UTC
Spec URL: https://download.copr.fedorainfracloud.org/results/uril/trustee-attester/fedora-rawhide-x86_64/08335240-rust-az-snp-vtpm/rust-az-snp-vtpm.spec
SRPM URL: https://download.copr.fedorainfracloud.org/results/uril/trustee-attester/fedora-rawhide-x86_64/08335240-rust-az-snp-vtpm/rust-az-snp-vtpm-0.7.1-1.fc42.src.rpm

Spec file created with: rust2rpm az-snp-vtpm 0.7.1 -I

rust2rpm.toml:
[package]
extra-sources = [
    { "number" = 1, "file" = "LICENSE", "comments" = [ "SOURCES were copied from copied from github:",
	"http://github.com/kinvolk/azure-cvm-tooling/" ] },
    { "number" = 2, "file" = "hcl-report-snp.bin", "comments" = [ "required by tests" ] },
    { "number" = 3, "file" = "certs.pem", "comments" = [ "required by tests" ] },
]
cargo-install-lib = true
cargo-install-bin = false

[scripts]
prep.pre = [ "cp -f %{SOURCE1} ." ]
check.pre = [ "mkdir -p ../test", "cp -f %{SOURCE2} %{SOURCE3} ../test" ]
check.post = [ "rm -rf ../test" ]

[features]
hide = ["integration_test"]

# add to %files:
# %license %{crate_instdir}/LICENSE

Comment 2 Fedora Review Service 2024-12-04 15:50:23 UTC
Copr build:
https://copr.fedorainfracloud.org/coprs/build/8341312
(failed)

Build log:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2327780-rust-az-snp-vtpm/fedora-rawhide-x86_64/08341312-rust-az-snp-vtpm/builder-live.log.gz

Please make sure the package builds successfully at least for Fedora Rawhide.

- If the build failed for unrelated reasons (e.g. temporary network
  unavailability), please ignore it.
- If the build failed because of missing BuildRequires, please make sure they
  are listed in the "Depends On" field


---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

Comment 3 Cole Robinson 2025-02-12 16:46:40 UTC
scratch build fails on non-x86_64, but I confirmed adding `supported-arches = ["x86_64"]` to rust2rpm.toml fixes it

rust2rpm.toml comments can also point to your PR fixing those SOURCES issues: https://github.com/kinvolk/azure-cvm-tooling/pull/64

rust2rpm also prings a warning: ARNING: Extra source 'LICENSE' might conflict with other files in the future. Using source numbers >= 2 is recommended.

So maybe number your sources 11,12,13 or similar

Comment 4 Uri Lublin 2025-02-16 14:01:57 UTC
Cole, thank you for the review.

SPEC URL: https://download.copr.fedorainfracloud.org/results/uril/trustee-attester/fedora-rawhide-x86_64/08660986-rust-az-snp-vtpm/rust-az-snp-vtpm.spec
SRPM URL: https://download.copr.fedorainfracloud.org/results/uril/trustee-attester/fedora-rawhide-x86_64/08660986-rust-az-snp-vtpm/rust-az-snp-vtpm-0.7.1-1.fc43.src.rpm


rust2rpm.toml:
[package]
extra-sources = [
    { "number" = 11, "file" = "https://raw.githubusercontent.com/kinvolk/azure-cvm-tooling/2bef60b88db7554935177ec63dd169190a39eab7/LICENSE", "comments" = [ "The crate does not contain LICENSE; Get it from upstream git repo", "http://github.com/kinvolk/azure-cvm-tooling/", "A patch was sent upstream:", "https://github.com/kinvolk/azure-cvm-tooling/pull/64" ] },
    { "number" = 12, "file" = "https://raw.githubusercontent.com/kinvolk/azure-cvm-tooling/2bef60b88db7554935177ec63dd169190a39eab7/az-cvm-vtpm/test/hcl-report-snp.bin", "comments" = [ "required by tests" ] },
    { "number" = 13, "file" = "https://raw.githubusercontent.com/kinvolk/azure-cvm-tooling/2bef60b88db7554935177ec63dd169190a39eab7/az-cvm-vtpm/test/certs.pem", "comments" = [ "required by tests" ] },
]
cargo-install-lib = true
cargo-install-bin = false
supported-arches = [ "x86_64"]

[scripts]
prep.pre = [ "cp -f %{SOURCE11} ." ]
check.pre = [ "mkdir -p ../test", "cp -f %{SOURCE12} %{SOURCE13} ../test" ]
check.post = [ "rm -rf ../test" ]

[features]
hide = ["integration_test"]

# add to %files:
# %license %{crate_instdir}/LICENSE

Comment 5 Fedora Review Service 2025-02-16 14:16:57 UTC
Copr build:
https://copr.fedorainfracloud.org/coprs/build/8661125
(succeeded)

Review template:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2327780-rust-az-snp-vtpm/fedora-rawhide-x86_64/08661125-rust-az-snp-vtpm/fedora-review/review.txt

Please take a look if any issues were found.


---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

Comment 6 Cole Robinson 2025-02-16 18:30:30 UTC
LGTM now

+ content matches rust2rpm.toml output (with the mentioned %license tweak)
+ builds on rawhide
+ installs on rawhide
+ content looks fine

setting fedora-review+

Comment 7 Fedora Admin user for bugzilla script actions 2025-02-24 13:56:15 UTC
The Pagure repository was created at https://src.fedoraproject.org/rpms/rust-az-snp-vtpm

Comment 8 Fedora Update System 2025-02-24 17:43:12 UTC
FEDORA-2025-4e40b72267 (rust-az-snp-vtpm-0.7.1-1.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-4e40b72267

Comment 9 Fedora Update System 2025-02-24 17:47:47 UTC
FEDORA-2025-4e40b72267 (rust-az-snp-vtpm-0.7.1-1.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.