Skip to content

Verifier Release v0.6.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 Nov 02:28
verifier-v0.6.3
dad8326
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changes since 0.6.1

  • Return HTTP 503 when AMD endorsements are unavailable, while continuing to reject cryptographically invalid quotes (#1484).
  • Coalesce concurrent AMD endorsement-certificate fetches and preserve typed collateral errors (#1484).
  • Reproduce measurements for guest NUMA layouts without PXB expanders, while retaining compatibility with existing layouts (#1458).
  • Harden shared TPM parsing against undersized response headers, excessive allocations and non-progressing handle enumeration (#1477, #1481).
  • Refresh the container CA trust store for emSign distrust and update shared TLS and attestation dependencies, including dcap-qvl 0.7.0 (#1463, #1464, #1473, #1498).

Upgrade notes

Treat HTTP 503 as temporary collateral unavailability rather than proof of an invalid quote. Both 0.6.3 and latest identify this released image.

Reproducibility

An independent public clone of this tag reproduced the published image digest.
Set umask 0022 before cloning, then follow this component's builder README
with IMAGE_VERSION=0.6.3 and the matching release tag/commit. A checkout created
under umask 0002 can give copied files group-write permissions and produce a
different digest despite identical contents. Setting the umask only after cloning
does not repair those permissions; use a fresh clone under umask 0022.

umask 0022
git clone --branch verifier-v0.6.3 https://github.com/Dstack-TEE/dstack.git

Source

Tag: verifier-v0.6.3 · Commit: dad8326f89a76e60e5d4b61c424a3329c92f60e9.

Docker Image Information

Image: ghcr.io/dstack-tee/dstack-verifier:0.6.3

Digest (SHA256): sha256:22aeb6808e38a56115f843d4d66f4852407e72f6080d5f8781fd82d9f819db41

Verification: Verify on Sigstore

Assets 2
Loading