Skip to content

feat(tdx): replace FFI DCAP verifier with pure-Rust dcap-qvl backend #167

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
imlk0 merged 2 commits into from
Jul 13, 2026
Merged

feat(tdx): replace FFI DCAP verifier with pure-Rust dcap-qvl backend #167

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
6794f5b
docs(claude): forbid manually editing spec Version/Release and changelog
imlk0 Jul 13, 2026
862c827
feat(tdx): replace FFI DCAP verifier with pure-Rust dcap-qvl backend
imlk0 Jul 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/build-python-sdk.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -64,7 +64,7 @@ jobs:
- name: Build tng binary (Linux)
if: runner.os == 'Linux' && matrix.target != 'x86_64-pc-windows-gnu'
run: |
cargo zigbuild -p tng --release --target ${{ matrix.target }}
cargo zigbuild -p tng --release --target ${{ matrix.target }} --features 'builtin-as-tdx-rust'
mkdir -p tng-python/bin/scripts
cp target/${{ matrix.target }}/release/tng tng-python/bin/scripts/tng
chmod +x tng-python/bin/scripts/tng
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/go-sdk.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,7 @@ jobs:
go-version: "1.21"

- name: Build TNG binary
run: cargo build --release -p tng
run: cargo build --release -p tng --features 'builtin-as-tdx-rust'

- name: Run Go unit tests
run: cd tng-go && go test -v ./...
Expand Down
1 change: 1 addition & 0 deletions CLAUDE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,7 @@ When creating or amending commits:
- **Always** use `--no-gpg-sign` to avoid GPG signing.
- **Never commit plan or spec files** (e.g. `docs/*-plan.md`, `docs/*-design.md`, `docs/*-spec.md`, or anything under `docs/superpowers/`). These should be gitignored (already covered by `.gitignore`) and kept local only.
- **Never commit any file that is already gitignored** — if a file matches `.gitignore`, it is intentionally local-only.
- **Never manually edit version information in `trusted-network-gateway.spec`** — do not touch the `Version:` or `Release:` fields, and do not add version-stamped `%changelog` entries by hand. Version/release bumps across the whole repo (`Cargo.toml`, `Cargo.lock`, `APPLICATION/tng/buildspec.yml`, `tng-python/pyproject.toml`, and the RPM spec `Version` + `%changelog`) are produced at a specific release stage by `make bump-version-{major,minor,patch}`. That target regenerates the spec changelog from commit subjects since the last tag, so a hand-written entry would both carry a wrong release number and duplicate the auto-collected commits. Edit the spec only for packaging logic (e.g. `BuildRequires`/`Requires`, `%build` flags); leave versioning to `make bump-version-*`.

## Bilingual Documentation Convention

Expand Down
Loading
Loading