TrustRuntime

Delivers lightweight confidential VM images with built-in signing/verification and trusted attribute services for runtime integrity protection.

Repository Contents

File	Description
trustruntime-1.0.0.tar.gz	Source tarball
vendor.tar.gz	Rust vendored dependencies
trustruntime.spec	RPM build spec file

Packages

This project provides three RPM packages:

trustruntime

CMS Signer/Verifier Service - the main agent for certificate management and signing operations.

• Binary: /usr/bin/trustruntime
• Service: trustruntime.service
• Config: /etc/trustruntime/agent.toml

trustruntime-launcher

VM Launcher for CCA (Confidential Computing Architecture) - starts confidential VMs.

• Binary: /bin/trt_launcher
• Service: trt_launcher.service
• Config: /etc/trt_launcher/trt_launcher.conf

trustruntime-builder

VM Image Builder - scripts and configurations for building confidential VM images.

• Scripts: /opt/trt_builder/
  • build.sh - Build script
  • bootstrapd - Bootstrap initialization
  • initrd.list - Initrd file list

Build Requirements

• rust
• cargo
• openssl-devel >= 3.0.0
• gcc
• make

Build RPM

# 1. Install build dependencies
sudo dnf install rpm-build rust cargo openssl-devel gcc make

# 2. Create rpmbuild directory structure
mkdir -p ~/rpmbuild/{SOURCES,SPECS}

# 3. Place source files and spec file
cp trustruntime-1.0.0.tar.gz ~/rpmbuild/SOURCES/
cp vendor.tar.gz ~/rpmbuild/SOURCES/
cp trustruntime.spec ~/rpmbuild/SPECS/

# 4. Build RPM (generates both binary and source packages)
cd ~/rpmbuild/SPECS
rpmbuild -ba trustruntime.spec

Build artifacts:

• ~/rpmbuild/RPMS/x86_64/ — three binary RPM packages
• ~/rpmbuild/SRPMS/ — source RPM package

License

MulanPSL-2.0