Delivers lightweight confidential VM images with built-in signing/verification and trusted attribute services for runtime integrity protection.

文件	最后提交记录	最后更新时间
.opencode	chore: add opencode configuration 添加 .opencode 目录，包含项目开发所需的技能配置文件。新增技能： - add-code-comments: Rust代码注释规范 - commit-rules: 提交信息规范 - integration-test: 集成测试执行 - wsl-cargo: WSL环境下cargo命令执行 Code-Owner: zhangshouxu@h-partners.com Co-Authored-By: glm-5 (alibaba-cn)	20 天前
conf	chore: add Cargo workspace and project configuration - Add Cargo workspace configuration (Cargo.toml, Cargo.lock) - Add Rust toolchain files (clippy.toml, rust-toolchain.toml, rustfmt.toml) - Add project documentation (AGENTS.md, CONTEXT.md, CHANGELOG.md) - Add server configuration (test-server-config.toml, conf/agent.toml) Code-Owner: zhangshouxu@h-partners.com Co-Authored-By: glm-5 (alibaba-cn)	19 天前
docs	docs: update architecture documentation - Add 04-plugin-framework.md (453 lines) - Update all ADR documents (8 files) - Update detailed-design documents (7 files) - Update architecture, cms-test-cli-design, contributing, faq - Update functional-design, integration-test-design, interface - Update requirements, user-guide - Update packaging files (README, build-rpm.sh, trustruntime.service) - Update main.rs with improved comments Code-Owner: zhangshouxu@h-partners.com Co-Authored-By: glm-5 <system-reminder>	4 天前
packaging	chore: add packaging configuration 添加RPM打包配置和systemd服务文件。文件清单： - packaging/README.md：打包说明文档 - packaging/build-rpm.sh：RPM构建脚本 - packaging/trustruntime.service：Systemd服务配置功能特性： - RPM包构建配置 - Systemd服务管理（ADR-0006） Code-Owner: zhangshouxu@h-partners.com Co-Authored-By: glm-5	5 天前
rust	!45 docs: update architecture documentation From: @sakura-01 Reviewed-by: @xinweiQ	4 天前
.gitignore	chore: commit README and gitignore from upstream - README.md: 更新为项目完整说明文档 - .gitignore: 添加 Rust 项目标准忽略规则 Code-Owner: zhangshouxu@h-partners.com Co-Authored-By: glm-5 (alibaba-cn)	20 天前
AGENTS.md	chore: add Cargo workspace and project configuration - Add Cargo workspace configuration (Cargo.toml, Cargo.lock) - Add Rust toolchain files (clippy.toml, rust-toolchain.toml, rustfmt.toml) - Add project documentation (AGENTS.md, CONTEXT.md, CHANGELOG.md) - Add server configuration (test-server-config.toml, conf/agent.toml) Code-Owner: zhangshouxu@h-partners.com Co-Authored-By: glm-5 (alibaba-cn)	19 天前
CHANGELOG.md	chore: add Cargo workspace and project configuration - Add Cargo workspace configuration (Cargo.toml, Cargo.lock) - Add Rust toolchain files (clippy.toml, rust-toolchain.toml, rustfmt.toml) - Add project documentation (AGENTS.md, CONTEXT.md, CHANGELOG.md) - Add server configuration (test-server-config.toml, conf/agent.toml) Code-Owner: zhangshouxu@h-partners.com Co-Authored-By: glm-5 (alibaba-cn)	19 天前
CONTEXT.md	chore: add Cargo workspace and project configuration - Add Cargo workspace configuration (Cargo.toml, Cargo.lock) - Add Rust toolchain files (clippy.toml, rust-toolchain.toml, rustfmt.toml) - Add project documentation (AGENTS.md, CONTEXT.md, CHANGELOG.md) - Add server configuration (test-server-config.toml, conf/agent.toml) Code-Owner: zhangshouxu@h-partners.com Co-Authored-By: glm-5 (alibaba-cn)	19 天前
README.md	chore: commit README and gitignore from upstream - README.md: 更新为项目完整说明文档 - .gitignore: 添加 Rust 项目标准忽略规则 Code-Owner: zhangshouxu@h-partners.com Co-Authored-By: glm-5 (alibaba-cn)	20 天前
test-server-config.toml	chore: add Cargo workspace and project configuration - Add Cargo workspace configuration (Cargo.toml, Cargo.lock) - Add Rust toolchain files (clippy.toml, rust-toolchain.toml, rustfmt.toml) - Add project documentation (AGENTS.md, CONTEXT.md, CHANGELOG.md) - Add server configuration (test-server-config.toml, conf/agent.toml) Code-Owner: zhangshouxu@h-partners.com Co-Authored-By: glm-5 (alibaba-cn)	19 天前

TrustRuntime

CMS签名验签服务，部署于机密计算虚机中，通过vsock提供签名、验签+签名、验签三类安全接口。

架构

trustruntime/
├── rust/                    # Cargo workspace
│   ├── framework/           # 通用进程框架 (trustruntime-framework)
│   ├── trustruntime/        # 主程序入口
│   ├── plugins/trustring/   # 签名验签业务插件
│   ├── integration-tests/   # 集成测试
│   ├── tools/cert-gen/      # 测试证书生成工具
│   └── scripts/             # 开发测试脚本
├── docs/                    # 设计文档
│   ├── adr/                 # 架构决策记录
│   ├── detailed-design/     # 详细设计
│   ├── requirements.md      # 需求设计文档
│   ├── interface.md         # 接口文档
│   └── functional-design.md # 功能设计文档
├── conf/                    # 默认配置
├── packaging/               # RPM打包
├── CONTEXT.md               # 术语表
├── AGENTS.md                # Agent指令
└── .opencode/               # opencode配置

快速开始

构建

cd rust
cargo build --release

测试

cd rust
cargo test --workspace

运行

开发测试：

cd rust
cargo build --release
./target/release/trustruntime --config ../conf/agent.toml

Windows用户替代方案：使用WSL执行上述命令，参见 .opencode/skills/wsl-cargo/SKILL.md。

生产部署（RPM安装后）：

trustruntime --config /etc/trustruntime/agent.toml

接口

类型	功能
0x10→0x11	签名：sign(data + 本地证书id)
0x12→0x13	验签+签名：先验签，再签名
0x14→0x15	验签：验证签名并判断证书身份

文档

使用者

使用指南 - 安装、配置、运维
接口文档 - API 参考
FAQ - 常见问题

开发者

开发指南 - 贡献流程、编码规范
架构设计 - 系统架构图、数据流
详细设计 - 各模块详细设计
架构决策 - ADR 记录

其他

需求文档 - 需求规格
术语表 - 项目术语
变更日志 - 版本历史
示例代码 - 使用示例

部署

参见 packaging/README.md

项目介绍

Delivers lightweight confidential VM images with built-in signing/verification and trusted attribute services for runtime integrity protection.

trustruntime:基于机密计算的运行时完整性保护项目

TrustRuntime

架构

快速开始

构建

测试

运行

接口

文档

使用者

开发者

其他

部署

项目介绍