Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
Support for signing DXIL post-compilation #1500
Is there an update on dxil validation in dxc, and allowing for validation/signing post-compile?
Right now you only get signed dxil if you happen to have dxil.dll in your compiler path, otherwise you just get unsigned dxil code.
Post-compile would be nice to keep shader compile toolchains flexible on Windows, but also allow us to leverage dxc running on linux machines (i.e. cloud/cluster), and the results could signed on demand (or by some other Windows environment) prior to usage on a machine without experimental features enabled. This is a pretty huge request from us (we are doing tons of linux-based cloud scaling of our pipelines, etc.. which includes shader compilation).
A linux binary that supports signing/validation would be superior, but I understand if that needs to remain as-is. However, since the compiler itself is open source, and the dxil.dll binary is loaded during compilation, it seems reasonable allow this decoupling. This way unsigned dxil could be produced on linux or windows, and then some windows-based approach can ensure dxil is properly signed when appropriate.