server: combine three servers to one ccnp server

.github/workflows/pr-check-rust.yaml

@@ -30,12 +30,10 @@ jobs:
           sudo apt update && yes | DEBIAN_FRONTEND=noninteractive sudo apt install -y libcryptsetup-dev clang protobuf-compiler protobuf-c-compiler libprotobuf-c-dev libprotobuf-c1 build-essential pkg-config libssl-dev
       - name: Run cargo check
         run: |
-          cd service/quote-server
+          cd service/ccnp-server
           cargo test
           cargo check
           cargo fmt -- --check
           cargo clippy
           cargo install --locked cargo-deny
           cargo deny check
-          cd tdx_attest
-          cargo test

.gitignore

@@ -15,3 +15,6 @@ tools/cvm-image-rewriter/pre-stage/05-readonly-data/cloud-init/x-shellscript/01-
 tools/cvm-image-rewriter/pre-stage/07-install-mvp-guest/cloud-init/
 tools/cvm-image-rewriter/pre-stage/07-install-mvp-guest/artifacts/*
 
+service/ccnp-server/target/
+service/ccnp-server/Cargo.lock
+service/ccnp-server/.cargo

service/quote-server/Cargo.toml → service/ccnp-server/Cargo.toml

@@ -1,11 +1,11 @@
 [package]
-name = "quoteServer"
-version = "0.1.0"
+name = "ccnp_server"
+version = "0.3.2"
 edition = "2021"
 
 [[bin]] # Bin to run the quote server
-name = "quote_server"
-path = "src/quote_server.rs"
+name = "ccnp_server"
+path = "src/main.rs"
 
 [dependencies]
 tonic = "0.9"
@@ -16,17 +16,19 @@ anyhow = "1.0"
 async-trait = "0.1.56"
 base64 = "0.13.0"
 log = "0.4.14"
-serde_json = "1.0"
-sha2 = "0.10"
 clap = { version = "4.0.29", features = ["derive"] }
 tonic-reflection = "0.9.2"
 tonic-health = "0.9.2"
-nix = "0.26.2"
-tdx_attest = "0.1.1"
+lazy_static = "1.4.0"
+cctrusted_vm = { git="https://github.com/cc-api/cc-trusted-api" }
+cctrusted_base = { git="https://github.com/cc-api/cc-trusted-api" }
+env_logger = "0.10.1"
+regex = "1.10.3"
+serde = { version = "1.0", features = ["derive"] }
+serde_yaml = "0.9.30"
+openssl = "0.10.63"
 
 [dev-dependencies]
-tower = { version = "0.4", features = ["util"] }
-hyper = { version ="0.14.27" }
 serial_test = { version ="2.0.0" }
 
 [build-dependencies]

service/pod-quote/Makefile → service/ccnp-server/Makefile

@@ -10,9 +10,9 @@ DESTDIR ?= $(PREFIX)/bin
 DEBUG ?=
 
 TARGET_DIR := target
-BIN_NAME := pod_quote
+BIN_NAME := ccnp_server
 
-CARGO := /usr/local/cargo/bin/cargo
+CARGO := cargo
 
 ifdef DEBUG
     release :=

service/ccnp-server/README.md

@@ -0,0 +1,101 @@
+# CCNP Service
+
+This service will provide CC event log/CC measurement/CC report by [CC Trusted API](https://github.com/cc-api/cc-trusted-api) for remote attestation service to verify the integrity and confidentiality of the trusted computing environment and required software environment.
+
+## Start Service
+
+Run the command:
+
+```
+sudo ./ccnp_server
+[2024-02-06T02:06:18Z INFO  ccnp_server] [ccnp-server]: set sock file permissions: /run/ccnp/uds/ccnp-server.sock
+[2024-02-06T02:06:18Z INFO  ccnp_server] [ccnp-server]: staring the service...
+```
+
+## Query Information
+
+1. Query the CC report
+
+Run the command:
+
+```
+grpcurl -authority "dummy"  -plaintext -d '{ "user_data": "MTIzNDU2NzgxMjM0NTY3ODEyMzQ1Njc4MTIzNDU2NzgxMjM0NTY3ODEyMzQ1Njc4", "nonce":"IXUKoBO1UM3c1wopN4sY" }'  -unix /run/ccnp/uds/ccnp-server.sock ccnp_server_pb.ccnp.GetCcReport
+```
+
+The output looks like this:
+
+```
+{
+  "ccType": 1,
+  "ccReport": "..."
+}
+```
+
+2. Query the CC measurement
+
+Run the command:
+
+```
+grpcurl -authority "dummy"  -plaintext -d '{ "index": 0, "algo_id": 12}'  -unix /run/ccnp/uds/ccnp-server.sock ccnp_server_pb.ccnp.GetCcMeasurement
+```
+
+The output looks like:
+
+```
+{
+  "measurement": {
+    "algoId": 12,
+    "hash": "..."
+  }
+}
+```
+
+3. Query the eventlog
+
+Run the command:
+
+```
+grpcurl -authority "dummy"  -plaintext -d '{"start": 0, "count": 3}'  -unix /run/ccnp/uds/ccnp-server.sock ccnp_server_pb.ccnp.GetCcEventlog
+```
+
+The output looks like:
+
+```
+{
+  "eventLogs": [
+    {
+      "eventType": 3,
+      "digests": [
+        {
+          "algoId": 4,
+          "hash": "..."
+        }
+      ],
+      "eventSize": 33,
+      "event": "..."
+    },
+    {
+      "eventType": 2147483659,
+      "digests": [
+        {
+          "algoId": 12,
+          "hash": "..."
+        }
+      ],
+      "eventSize": 42,
+      "event": "..."
+    },
+    {
+      "eventType": 2147483658,
+      "digests": [
+        {
+          "algoId": 12,
+          "hash": "..."
+        }
+      ],
+      "eventSize": 58,
+      "event": "..."
+    }
+  ]
+}
+```

service/quote-server/build.rs → service/ccnp-server/build.rs

@@ -7,15 +7,15 @@ use std::env;
 use std::path::PathBuf;
 
 fn main() -> Result<(), Box<dyn std::error::Error>> {
-    tonic_build::compile_protos("api/quote-server.proto")?;
+    tonic_build::compile_protos("proto/ccnp-server.proto")?;
 
     let original_out_dir = PathBuf::from(env::var("OUT_DIR")?);
     let out_dir = "./src";
 
     tonic_build::configure()
         .out_dir(out_dir)
-        .file_descriptor_set_path(original_out_dir.join("quote_server_descriptor.bin"))
-        .compile(&["api/quote-server.proto"], &["api"])?;
+        .file_descriptor_set_path(original_out_dir.join("ccnp_server_descriptor.bin"))
+        .compile(&["proto/ccnp-server.proto"], &["proto"])?;
 
     Ok(())
 }

service/ccnp-server/proto/ccnp-server.proto

@@ -0,0 +1,81 @@
+syntax = "proto3";
+package ccnp_server_pb;
+
+message HealthCheckRequest {
+  string service = 1;
+}
+
+message HealthCheckResponse {
+  enum ServingStatus {
+    UNKNOWN = 0;
+    SERVING = 1;
+    NOT_SERVING = 2;
+    SERVICE_UNKNOWN = 3;
+  }
+  ServingStatus status = 1;
+}
+
+service ccnp {
+    rpc GetDefaultAlgorithm(GetDefaultAlgorithmRequest) returns (GetDefaultAlgorithmResponse);
+    rpc GetMeasurementCount(GetMeasurementCountRequest) returns (GetMeasurementCountResponse);
+    rpc GetCcReport (GetCcReportRequest) returns (GetCcReportResponse);
+    rpc GetCcMeasurement (GetCcMeasurementRequest) returns (GetCcMeasurementResponse) {}
+    rpc GetCcEventlog (GetCcEventlogRequest) returns (GetCcEventlogResponse) {}
+}
+
+message GetDefaultAlgorithmRequest {
+}
+
+message GetDefaultAlgorithmResponse {
+    uint32 algo_id = 1;
+}
+
+message GetMeasurementCountRequest {
+}
+
+message GetMeasurementCountResponse {
+    uint32 count = 1;
+}
+
+message GetCcReportRequest {
+    string user_data = 1;
+    string nonce = 2;
+}
+
+message GetCcReportResponse {
+    int32 cc_type = 1;
+    bytes cc_report = 2;
+}
+
+message GetCcMeasurementRequest {
+    uint32 index = 1;
+    uint32 algo_id = 2;
+}
+
+message GetCcMeasurementResponse {
+    TcgDigest measurement = 1;
+}
+
+message GetCcEventlogRequest {
+    uint32 start = 1;
+    uint32 count = 2;
+}
+
+message TcgDigest {
+    uint32  algo_id = 1;
+    bytes   hash = 2;
+}
+
+message TcgEventlog {
+    uint32 rec_num = 1;
+    uint32  imr_index = 2;
+    uint32  event_type = 3;
+    repeated TcgDigest digests = 4;
+    uint32  event_size = 5;
+    bytes   event = 6;
+    map<string, string> extra_info = 7;
+}
+
+message GetCcEventlogResponse {
+    repeated TcgEventlog event_logs = 1;
+}