Dstack spike — boot the universal image in a CVM, verify the chain end-to-end
维护者通常 1 天内回复
还没有人认领这个 Issue。
评估
- 难度
- 5/5
- 预计耗时
- 一周以上
- 新手友好度
- 15/100
- Issue 类型
- 功能
- 描述清晰度
- 描述清楚
- 活跃度
- 活跃
- 技术栈
- cloud, docker, github, typescript
调研方向
Start with ADR 0027 and the deploy train that produces BOS_IMAGE_DIGEST; issue #490 must land first. The spike requires provisioning a Phala Dstack TDX CVM, booting the pinned universal image, and checking attestation, trustless verification, and in-CVM TLS. Record the Path B feasibility verdict and findings in ADR 0027, then update its status.
由索引模型根据 Issue 内容生成。
描述
Blocked by: #490 (ADR 0027 must exist first)
What to build
A throwaway spike proving the confidential verified-serving tier (ADR 0027) end to end: deploy the universal image to a testnet Phala Dstack CVM and verify the full chain of trust. Output is spike notes appended to ADR 0027 and a go/no-go on its strong version — then promote the ADR to Accepted or amend it.
Steps
- Prereqs (human-side): Phala Cloud account + TDX CVM provisioning; decide instance sizing. No platform code changes expected — the universal image is already the right artifact.
- Boot Path A first (self-contained): build/push a testnet image whose compose pins the GHCR digest (the deploy train already produces
BOS_IMAGE_DIGEST); stage the tenant namespace so the instance boots self-contained; run it in the CVM withBOS_ACCOUNT/BOS_GATEWAYenv. - Verify the chain:
- compose-hash (RTMR3) ↔ pushed GHCR digest ↔ the exact bytes CI built
/.well-known/attestationreturns quote + event log + VM config; nonce freshness viareportDataworks- Trustless verification locally with
dcap-qvl/dstack-verifier(not just Phala's hosted API) - TLS terminated inside the CVM (ZT-TLS pattern): enclave-held ACME keys,
/evidences/bound to the quote, CAA records set
- Go/no-go: config-hash runtime-data binding (Path B's anchor). Can the enclave report the resolved FastKV config hash (+ registry height) in runtime data, and hard-gate CDN-fetched bundles against the config's SRI pins? If awkward, record the fallback: Path A-only verification (compose-hash ↔ digest, no config binding).
- Write up: append spike notes to ADR 0027 with findings, friction points, and the Path B verdict; update the ADR Status (Proposed → Accepted, or amend). Flag future work:
bos deploy --confidential,bos verify <domain>, on-chain DCAP verification, FastKV-published measurement allowlist.
Acceptance criteria
- Universal image boots in a testnet Dstack CVM, self-contained, identity-driven (
BOS_ACCOUNT/BOS_GATEWAY) - Compose-hash verified against the pushed GHCR digest
-
/.well-known/attestationverified trustlessly (localdcap-qvl/dstack-verifier), nonce-fresh - TLS termination inside the CVM with evidence binding demonstrated
- Path B (config-hash runtime-data binding + in-enclave SRI pin gating) verdict recorded: feasible or fallback
- Spike notes appended to ADR 0027; Status updated
- 主要语言
- TypeScript
- 星标
- 5
- 派生
- 3
- 平均合并
- 10 小时 12 分钟
- 30 天内合并 PR
- 102
环境准备
- 提供 Dockerfile 或 Docker Compose 文件
- 没有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
NEARBuilders/everything-dev 的其他 Issue
-
难度 2/5 1-3 小时 新手友好度 78/100
NEARBuilders/everything-dev#400 ·
维护者通常 1 天内回复
-
bug
难度 5/5 一周以上 新手友好度 25/100
NEARBuilders/everything-dev#531 ·
维护者通常 1 天内回复
-
难度 5/5 一周以上 新手友好度 25/100
NEARBuilders/everything-dev#526 ·
维护者通常 1 天内回复
-
难度 4/5 3-5 天 新手友好度 42/100
NEARBuilders/everything-dev#518 · 1 条评论 ·
维护者通常 1 天内回复
-
bug needs-triage
难度 5/5 一周以上 新手友好度 35/100
NEARBuilders/everything-dev#496 ·
维护者通常 1 天内回复
查看 NEARBuilders/everything-dev 的全部 Issue
相似的 Issue
-
难度 2/5 1-3 小时 新手友好度 72/100
kunchenguid/gh-axi#220 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 78/100
维护者通常 1 天内回复
-
enhancement
难度 2/5 1-3 小时 新手友好度 79/100
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 68/100
维护者通常 1 天内回复
-
prerender: wait for env-runner worker readiness before crawling可能已有人在做 @sarankumar1325 今天认领。 未关闭
难度 2/5 1-3 小时 新手友好度 82/100
维护者通常 1 天内回复