Skip to content

Support PPCIE mode and as many GPUs are in the system. #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
tmagik wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Support PPCIE mode and as many GPUs are in the system. #4

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
88 changes: 47 additions & 41 deletions inteltrustauthorityclient/nvgpu/gpu_adapter.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,56 +41,62 @@ def generate_nvgpu_evidence(user_nonce):
try:
nvmlInit()
state = nvmlSystemGetConfComputeState()
print(state.ccFeature)
if state.ccFeature == 0:
err_msg = "The confidential compute feature is disabled !!\nQuitting now."
raise Error(err_msg)
print("WARNING: state.ccFeature = 0 (disabled), but library needs PPCIE support")
#err_msg = "The confidential compute feature is disabled !!\nQuitting now."
#raise Error(err_msg)
if state.devToolsMode != 0:
log.warning("The system is running in CC DevTools mode !!")
evidence_nonce = bytes.fromhex(user_nonce)
number_of_available_gpus = nvmlDeviceGetCount()
if number_of_available_gpus == 0:
err_msg = "No NV GPU found ! \nQuitting now."
raise Error(err_msg)
if number_of_available_gpus > 1:
log.warning("There are more than one NVGPU found, but only the first one used")
gpu_handle = nvmlDeviceGetHandleByIndex(0)

try:
attestation_report_struct = nvmlDeviceGetConfComputeGpuAttestationReport(gpu_handle,
evidence_nonce)
length_of_attestation_report = attestation_report_struct.attestationReportSize
attestation_report = attestation_report_struct.attestationReport
attestation_report_data = list()

for i in range(length_of_attestation_report):
attestation_report_data.append(attestation_report[i])

bin_attestation_report_data = bytes(attestation_report_data)
except Exception as err:
log.error(err)
err_msg = "Something went wrong while fetching the attestation report from the gpu."
raise PynvmlError(err_msg)

try:
cert_struct = nvmlDeviceGetConfComputeGpuCertificate(gpu_handle)
# fetching the attestation cert chain.
length_of_attestation_cert_chain = cert_struct.attestationCertChainSize
attestation_cert_chain = cert_struct.attestationCertChain
attestation_cert_data = list()

for i in range(length_of_attestation_cert_chain):
attestation_cert_data.append(attestation_cert_chain[i])

bin_attestation_cert_data = bytes(attestation_cert_data)

except Exception as err:
log.error(err)
err_msg = "Something went wrong while fetching the certificate chains from the gpu."
raise PynvmlError(err_msg)
#if number_of_available_gpus > 1:
# log.warning("There are more than one NVGPU found, but only the first one used")

for gpu_index in range(number_of_available_gpus):
print("gathering report for gpu index %d" % gpu_index)
gpu_handle = nvmlDeviceGetHandleByIndex(gpu_index)

try:
attestation_report_struct = nvmlDeviceGetConfComputeGpuAttestationReport(gpu_handle,
evidence_nonce)
length_of_attestation_report = attestation_report_struct.attestationReportSize
attestation_report = attestation_report_struct.attestationReport
attestation_report_data = list()

for i in range(length_of_attestation_report):
attestation_report_data.append(attestation_report[i])

bin_attestation_report_data = bytes(attestation_report_data)
except Exception as err:
log.error(err)
err_msg = "Something went wrong while fetching the attestation report from the gpu."
raise PynvmlError(err_msg)

try:
cert_struct = nvmlDeviceGetConfComputeGpuCertificate(gpu_handle)
# fetching the attestation cert chain.
length_of_attestation_cert_chain = cert_struct.attestationCertChainSize
attestation_cert_chain = cert_struct.attestationCertChain
attestation_cert_data = list()

for i in range(length_of_attestation_cert_chain):
attestation_cert_data.append(attestation_cert_chain[i])

bin_attestation_cert_data = bytes(attestation_cert_data)

except Exception as err:
log.error(err)
err_msg = "Something went wrong while fetching the certificate chains from the gpu."
raise PynvmlError(err_msg)

gpu_evidence = {'certChainBase64Encoded': base64.b64encode(bin_attestation_cert_data),
'attestationReportHexStr': bin_attestation_report_data.hex()}
evidence_list.append(gpu_evidence)

gpu_evidence = {'certChainBase64Encoded': base64.b64encode(bin_attestation_cert_data),
'attestationReportHexStr': bin_attestation_report_data.hex()}
evidence_list.append(gpu_evidence)
nvmlShutdown()
except Exception as error:
log.error(error)
Expand Down