Commit graph

43 commits

Author SHA1 Message Date
Daniel P. Berrangé
cf18904152 fix build for boost 1.90 update api breakage
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2026-01-15 14:05:18 +00:00
Daniel P. Berrangé
8cfefca1b8 Add links to src-git repo branches
[skip changelog]
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2026-01-15 11:53:57 +00:00
Daniel P. Berrangé
00a038c816 Fixes for GCC 16 build failures
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2026-01-07 09:25:51 +00:00
Daniel P. Berrangé
64d658466d Fix name of patch 0127
[skip changelog]
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2026-01-06 17:45:38 +00:00
Miro Hrončok
4c8f490425 sgx-pccs-admin: Migrate from deprecated pkg_resources to packaging 2026-01-06 17:21:54 +00:00
Daniel P. Berrangé
77222ebd3a Drop dep from pccs to mpa_registration
pccs.service would normally run on a separate host from the compute
host and has no functional dep on mpa_registration.

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2026-01-06 17:18:54 +00:00
Daniel P. Berrangé
d4b730c917 Improve pycryptography port & drop pccs port number change
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-12-10 11:10:45 +00:00
Daniel P. Berrangé
22a892466e Add sgx-common dep from pccs
This is needed to pull in license file text

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-12-08 16:53:09 +00:00
Daniel P. Berrangé
2ea9580681 Make npm dep conditional for RHEL-9
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-12-08 15:11:23 +00:00
Daniel P. Berrangé
6615983b83 Fix traceback when clearing keyring if none exists
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-12-04 18:10:18 +00:00
Daniel P. Berrangé
68827ae2ef Drop sgx-mpa dep from sgx-pccs
While pccs can be run node-local, a typical deployment would
have pccs on the LAN to cache certs across many hosts. As
such a dep on sgx-mpa is inappropriate, and tdx-qgs already
has a weak dep for this.

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-12-04 18:10:18 +00:00
Daniel P. Berrangé
12f5229647 Port to pycryptography and pyasn1 and make keyring optional
pyOpenSSL 24.0.0 removed several APIs required by pccsadmin, so
porting to pycryptography is required.

Using pyasn1 instead of asn1 gives stronger validation during
parsing and brings compatibility with RHEL that lacks python3-asn1

The keyring package needs to be optional on RHEL which lacks this
module (currently).

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-12-04 18:10:18 +00:00
Daniel P. Berrangé
b5fba5c2f9 Add systemd & sysusers scriptlets for PCCS
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-12-04 18:10:18 +00:00
Daniel P. Berrangé
22edf3607d Enable pccsadmin everywhere
Since pccs was reintroduced the pccsadmin tool is now relevant on
both RHEL and Fedora

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-12-04 18:10:18 +00:00
Yaakov Selkowitz
059577a9d2 Use chrpath to remove RPATH
chrpath is included in RHEL, patchelf is not.
2025-12-02 12:44:31 -05:00
Daniel P. Berrangé
1ca515068d Set execute on node_sqlite3.node for debuginfo
The debuginfo extraction script only processes executable files

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-11-18 17:27:01 +00:00
Daniel P. Berrangé
63edf1d2da Add patchelf as a build dep
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-11-18 16:39:52 +00:00
Daniel P. Berrangé
82fced15bc Purge nodejs sqlite3 rpath instead of disabling rpath checks
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-11-18 16:22:43 +00:00
Daniel P. Berrangé
8b750f618f Drop obsolete perl mangling cmd that is failing
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-11-18 16:22:43 +00:00
Daniel P. Berrangé
7a1b3853de Re-add tinyxml2 bundling to be used in RHEL rebuilds
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-11-18 16:22:43 +00:00
Daniel P. Berrangé
2a38f81416 Wildcard ignore more tarballs
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-11-18 16:22:43 +00:00
Daniel P. Berrangé
342304b814 Stop using _sbindir for services
The .service files have to be hardcoded to a path, which must now
be the same as _bindir, so there's no point using _sbindir.

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-11-18 16:22:43 +00:00
Daniel P. Berrangé
466def6232 Add newline in pccs.service
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-11-18 16:22:43 +00:00
Vít Ondruch
4dc7682346 Rebuild for nodejs-packaging
Recently, Node.js changed the way node modules are installed to allow for better parallel functionality and easier unbundling of certain parts of Node.js.

Previously, Node.js was using a symlink, %{_libdir}/node_modules, which pointed to a versioned path, e.g., %{_libdir}/node_modules_22.

This has changed to using a global %{_libdir}/node_modules static shared folder for generic modules and %{_libdir}/node_modules_XX for version-specific modules.

This change is better described in the Fedora change proposal wiki: https://fedoraproject.org/wiki/Changes/NodejsNodeModulesPath.

This also needed to be reflected in nodejs-packaging macros, which forces a rebuild of dependent packages.
2025-11-12 10:47:23 +01:00
Vít Ondruch
de69c90ee7 Rebuild for nodejs-packaging
Recently, Node.js changed the way node modules are installed to allow for better parallel functionality and easier unbundling of certain parts of Node.js.

Previously, Node.js was using a symlink, %{_libdir}/node_modules, which pointed to a versioned path, e.g., %{_libdir}/node_modules_22.

This has changed to using a global %{_libdir}/node_modules static shared folder for generic modules and %{_libdir}/node_modules_XX for version-specific modules.

This change is better described in the Fedora change proposal wiki: https://fedoraproject.org/wiki/Changes/NodejsNodeModulesPath.

This also needed to be reflected in nodejs-packaging macros, which forces a rebuild of dependent packages.
2025-11-12 10:44:40 +01:00
Daniel P. Berrangé
a860a0d0f1 Trigger udev to set /dev/sgx_provision access
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-10-09 17:57:45 +01:00
Benjamin A. Beasley
56e1151f70 Rebuilt for tinyxml2 11.0.0 2025-08-23 07:07:41 -04:00
Yaakov Selkowitz
3f17e77b8d Use rust-toolset on RHEL
This provides the Rust macros used for building RHEL packages.
2025-08-01 17:05:20 -04:00
Fedora Release Engineering
bca7dccbe5 Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild 2025-07-24 20:44:11 +00:00
Daniel P. Berrangé
aac61150a4 Rebase to DCAP 1.23 / SGX 2.26, re-adding PCCS
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-07-09 16:46:17 +01:00
Daniel P. Berrangé
2bb34aafc2 Fix chmod patch and drop unlink patch
Unlinking is no longer required since using the RuntimeDirectory
directive in the unit file.

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-06-05 18:03:26 +01:00
Daniel P. Berrangé
75e1da1e6b ghost the qgs rundir and remove post stop socket deletion
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-06-04 11:49:48 +01:00
Daniel P. Berrangé
499c63f0f3 Switch to use systemd runtimedir & delete sockets on startup/shutdown
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-05-22 18:46:15 +01:00
Daniel P. Berrangé
4877478dda Always set QGS_ARGS
systemd will log a warning if a env var referenced by the unit file
is not set.

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-05-13 15:00:59 +01:00
Daniel P. Berrangé
e9a700de60 Add ability to control the socket mode
QEMU needs access so the socket needs to be mode 0666

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-05-13 15:00:52 +01:00
Daniel P. Berrangé
8a8ccc68e2 Honour CFLAGS/LDFLAGS during build
This enables most of the standard Fedora hardening for the SGX host
software components.

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-04-16 16:51:51 +01:00
Daniel P. Berrangé
badb3a1f56 Change way we override SMP flags for qve.so
This avoids passing an empty string as an arg to 'make' which
breaks on RHEL-9.
2025-03-19 16:40:07 +00:00
Yaakov Selkowitz
0e3cbe07fc Use vendored tinyxml2 for RHEL builds 2025-03-10 12:40:42 +00:00
Daniel P. Berrangé
b092f4a599 Workaround for cmake4 incompatibility
cmake 4 dropped compat with cmake < 3.5, which breaks any code
which uses

  cmake_minimum_required(VERSION 3.0.0)

Rather than patching the CMakeLists.txt file, or patching the build
system to pass -DCMAKE_POLICY_VERSION_MINIMUM=3.5, set the env var
which gets inherited by any invokatin of cmake.

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-03-10 12:38:31 +00:00
Daniel P. Berrangé
8e2cef94b0 Disable pccsadmin on RHEL to avoid python deps from EPEL
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-03-07 19:09:09 +00:00
Daniel P. Berrangé
a420abb0f1 Update .service units to use /usr/bin instead of /usr/sbin
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-02-18 11:20:29 +00:00
Daniel P. Berrangé
b041533eb9 Initial import
https://bugzilla.redhat.com/show_bug.cgi?id=2342978
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2025-02-14 16:05:42 +00:00
releng bot
f0cb093f39 Added the README 2025-02-14 15:53:59 +00:00