@super-protocol/addons-tee 2.0.0 → 2.0.1

package/bindings/amd-sev-snp-napi-rs/index.d.ts

@@ -0,0 +1,51 @@
+/* tslint:disable */
+/* eslint-disable */
+
+/* auto-generated by NAPI-RS */
+
+export const SNP_REPORT_DATA_SIZE: number
+export const KDS_CERT_SITE: string
+export const KDS_VCEK: string
+export const SHA256_BUFFER_SIZE: number
+export const ARK_MILAN_PEM: Uint8Array
+export const ARK_GENOA_PEM: Uint8Array
+export const ARK_TURIN_PEM: Uint8Array
+export const ASK_MILAN_PEM: Uint8Array
+export const ASK_GENOA_PEM: Uint8Array
+export const ASK_TURIN_PEM: Uint8Array
+/** Well-known AMD SEV-SNP code names as JS string enum. */
+export enum WellKnownSnpCodeNames {
+  Milan = 'Milan',
+  Genoa = 'Genoa',
+  Turin = 'Turin'
+}
+export interface CpuInfo {
+  family: number
+  model: number
+  stepping: number
+}
+export interface ImportantSecurityFields {
+  vmpl: number
+  debugAllowed: boolean
+  ciphertextHiding: boolean
+  pageSwapDisabled: boolean
+  snp: number
+}
+export const IMPORTANT_SECURITY_FIELDS_DUMMY: ImportantSecurityFields
+export declare function getSnpReport(data: Buffer, vmpl: number): Buffer
+export declare function getVcekKdsUrl(report: Buffer, generation: string): string
+export declare function getReportData(report: Buffer): Buffer
+export declare function getReportMeasure(report: Buffer): Buffer
+export declare function getReportVmpl(report: Buffer): number
+export declare function getReportPolicy(report: Buffer): bigint
+export declare function getReportImportantSecurityFields(report: Buffer): ImportantSecurityFields
+export declare function getReportCpuInfo(report: Buffer): CpuInfo
+/**
+ * Identify EPYC generation from provided CpuInfo (family/model).
+ * Returns a `WellKnownSnpCodeNames` enum for known SNP generations.
+ */
+export declare function getCpuGeneration(cpuInfo: CpuInfo): WellKnownSnpCodeNames
+export declare function getCpuInfo(): CpuInfo
+export declare function getCpuSig(cpuInfo: CpuInfo): number
+export declare function getLogicalCoresCount(): number
+export declare function calcSnpMeasure(ovmfPath: string, kernelSha256: Buffer, initrdSha256: Buffer, cmdlineSha256: Buffer, vcpuSig: number, vcpuCount: number): Buffer

package/bindings/amd-sev-snp-napi-rs/index.js

@@ -0,0 +1,339 @@
+/* tslint:disable */
+/* eslint-disable */
+/* prettier-ignore */
+
+/* auto-generated by NAPI-RS */
+
+const { existsSync, readFileSync } = require('fs')
+const { join } = require('path')
+
+const { platform, arch } = process
+
+let nativeBinding = null
+let localFileExisted = false
+let loadError = null
+
+function isMusl() {
+  // For Node 10
+  if (!process.report || typeof process.report.getReport !== 'function') {
+    try {
+      const lddPath = require('child_process').execSync('which ldd').toString().trim()
+      return readFileSync(lddPath, 'utf8').includes('musl')
+    } catch (e) {
+      return true
+    }
+  } else {
+    const { glibcVersionRuntime } = process.report.getReport().header
+    return !glibcVersionRuntime
+  }
+}
+
+switch (platform) {
+  case 'android':
+    switch (arch) {
+      case 'arm64':
+        localFileExisted = existsSync(join(__dirname, 'amd-sev-snp-napi-rs.android-arm64.node'))
+        try {
+          if (localFileExisted) {
+            nativeBinding = require('./amd-sev-snp-napi-rs.android-arm64.node')
+          } else {
+            nativeBinding = require('amd-sev-snp-napi-rs-android-arm64')
+          }
+        } catch (e) {
+          loadError = e
+        }
+        break
+      case 'arm':
+        localFileExisted = existsSync(join(__dirname, 'amd-sev-snp-napi-rs.android-arm-eabi.node'))
+        try {
+          if (localFileExisted) {
+            nativeBinding = require('./amd-sev-snp-napi-rs.android-arm-eabi.node')
+          } else {
+            nativeBinding = require('amd-sev-snp-napi-rs-android-arm-eabi')
+          }
+        } catch (e) {
+          loadError = e
+        }
+        break
+      default:
+        throw new Error(`Unsupported architecture on Android ${arch}`)
+    }
+    break
+  case 'win32':
+    switch (arch) {
+      case 'x64':
+        localFileExisted = existsSync(
+          join(__dirname, 'amd-sev-snp-napi-rs.win32-x64-msvc.node')
+        )
+        try {
+          if (localFileExisted) {
+            nativeBinding = require('./amd-sev-snp-napi-rs.win32-x64-msvc.node')
+          } else {
+            nativeBinding = require('amd-sev-snp-napi-rs-win32-x64-msvc')
+          }
+        } catch (e) {
+          loadError = e
+        }
+        break
+      case 'ia32':
+        localFileExisted = existsSync(
+          join(__dirname, 'amd-sev-snp-napi-rs.win32-ia32-msvc.node')
+        )
+        try {
+          if (localFileExisted) {
+            nativeBinding = require('./amd-sev-snp-napi-rs.win32-ia32-msvc.node')
+          } else {
+            nativeBinding = require('amd-sev-snp-napi-rs-win32-ia32-msvc')
+          }
+        } catch (e) {
+          loadError = e
+        }
+        break
+      case 'arm64':
+        localFileExisted = existsSync(
+          join(__dirname, 'amd-sev-snp-napi-rs.win32-arm64-msvc.node')
+        )
+        try {
+          if (localFileExisted) {
+            nativeBinding = require('./amd-sev-snp-napi-rs.win32-arm64-msvc.node')
+          } else {
+            nativeBinding = require('amd-sev-snp-napi-rs-win32-arm64-msvc')
+          }
+        } catch (e) {
+          loadError = e
+        }
+        break
+      default:
+        throw new Error(`Unsupported architecture on Windows: ${arch}`)
+    }
+    break
+  case 'darwin':
+    localFileExisted = existsSync(join(__dirname, 'amd-sev-snp-napi-rs.darwin-universal.node'))
+    try {
+      if (localFileExisted) {
+        nativeBinding = require('./amd-sev-snp-napi-rs.darwin-universal.node')
+      } else {
+        nativeBinding = require('amd-sev-snp-napi-rs-darwin-universal')
+      }
+      break
+    } catch {}
+    switch (arch) {
+      case 'x64':
+        localFileExisted = existsSync(join(__dirname, 'amd-sev-snp-napi-rs.darwin-x64.node'))
+        try {
+          if (localFileExisted) {
+            nativeBinding = require('./amd-sev-snp-napi-rs.darwin-x64.node')
+          } else {
+            nativeBinding = require('amd-sev-snp-napi-rs-darwin-x64')
+          }
+        } catch (e) {
+          loadError = e
+        }
+        break
+      case 'arm64':
+        localFileExisted = existsSync(
+          join(__dirname, 'amd-sev-snp-napi-rs.darwin-arm64.node')
+        )
+        try {
+          if (localFileExisted) {
+            nativeBinding = require('./amd-sev-snp-napi-rs.darwin-arm64.node')
+          } else {
+            nativeBinding = require('amd-sev-snp-napi-rs-darwin-arm64')
+          }
+        } catch (e) {
+          loadError = e
+        }
+        break
+      default:
+        throw new Error(`Unsupported architecture on macOS: ${arch}`)
+    }
+    break
+  case 'freebsd':
+    if (arch !== 'x64') {
+      throw new Error(`Unsupported architecture on FreeBSD: ${arch}`)
+    }
+    localFileExisted = existsSync(join(__dirname, 'amd-sev-snp-napi-rs.freebsd-x64.node'))
+    try {
+      if (localFileExisted) {
+        nativeBinding = require('./amd-sev-snp-napi-rs.freebsd-x64.node')
+      } else {
+        nativeBinding = require('amd-sev-snp-napi-rs-freebsd-x64')
+      }
+    } catch (e) {
+      loadError = e
+    }
+    break
+  case 'linux':
+    switch (arch) {
+      case 'x64':
+        if (isMusl()) {
+          localFileExisted = existsSync(
+            join(__dirname, 'amd-sev-snp-napi-rs.linux-x64-musl.node')
+          )
+          try {
+            if (localFileExisted) {
+              nativeBinding = require('./amd-sev-snp-napi-rs.linux-x64-musl.node')
+            } else {
+              nativeBinding = require('amd-sev-snp-napi-rs-linux-x64-musl')
+            }
+          } catch (e) {
+            loadError = e
+          }
+        } else {
+          localFileExisted = existsSync(
+            join(__dirname, 'amd-sev-snp-napi-rs.linux-x64-gnu.node')
+          )
+          try {
+            if (localFileExisted) {
+              nativeBinding = require('./amd-sev-snp-napi-rs.linux-x64-gnu.node')
+            } else {
+              nativeBinding = require('amd-sev-snp-napi-rs-linux-x64-gnu')
+            }
+          } catch (e) {
+            loadError = e
+          }
+        }
+        break
+      case 'arm64':
+        if (isMusl()) {
+          localFileExisted = existsSync(
+            join(__dirname, 'amd-sev-snp-napi-rs.linux-arm64-musl.node')
+          )
+          try {
+            if (localFileExisted) {
+              nativeBinding = require('./amd-sev-snp-napi-rs.linux-arm64-musl.node')
+            } else {
+              nativeBinding = require('amd-sev-snp-napi-rs-linux-arm64-musl')
+            }
+          } catch (e) {
+            loadError = e
+          }
+        } else {
+          localFileExisted = existsSync(
+            join(__dirname, 'amd-sev-snp-napi-rs.linux-arm64-gnu.node')
+          )
+          try {
+            if (localFileExisted) {
+              nativeBinding = require('./amd-sev-snp-napi-rs.linux-arm64-gnu.node')
+            } else {
+              nativeBinding = require('amd-sev-snp-napi-rs-linux-arm64-gnu')
+            }
+          } catch (e) {
+            loadError = e
+          }
+        }
+        break
+      case 'arm':
+        if (isMusl()) {
+          localFileExisted = existsSync(
+            join(__dirname, 'amd-sev-snp-napi-rs.linux-arm-musleabihf.node')
+          )
+          try {
+            if (localFileExisted) {
+              nativeBinding = require('./amd-sev-snp-napi-rs.linux-arm-musleabihf.node')
+            } else {
+              nativeBinding = require('amd-sev-snp-napi-rs-linux-arm-musleabihf')
+            }
+          } catch (e) {
+            loadError = e
+          }
+        } else {
+          localFileExisted = existsSync(
+            join(__dirname, 'amd-sev-snp-napi-rs.linux-arm-gnueabihf.node')
+          )
+          try {
+            if (localFileExisted) {
+              nativeBinding = require('./amd-sev-snp-napi-rs.linux-arm-gnueabihf.node')
+            } else {
+              nativeBinding = require('amd-sev-snp-napi-rs-linux-arm-gnueabihf')
+            }
+          } catch (e) {
+            loadError = e
+          }
+        }
+        break
+      case 'riscv64':
+        if (isMusl()) {
+          localFileExisted = existsSync(
+            join(__dirname, 'amd-sev-snp-napi-rs.linux-riscv64-musl.node')
+          )
+          try {
+            if (localFileExisted) {
+              nativeBinding = require('./amd-sev-snp-napi-rs.linux-riscv64-musl.node')
+            } else {
+              nativeBinding = require('amd-sev-snp-napi-rs-linux-riscv64-musl')
+            }
+          } catch (e) {
+            loadError = e
+          }
+        } else {
+          localFileExisted = existsSync(
+            join(__dirname, 'amd-sev-snp-napi-rs.linux-riscv64-gnu.node')
+          )
+          try {
+            if (localFileExisted) {
+              nativeBinding = require('./amd-sev-snp-napi-rs.linux-riscv64-gnu.node')
+            } else {
+              nativeBinding = require('amd-sev-snp-napi-rs-linux-riscv64-gnu')
+            }
+          } catch (e) {
+            loadError = e
+          }
+        }
+        break
+      case 's390x':
+        localFileExisted = existsSync(
+          join(__dirname, 'amd-sev-snp-napi-rs.linux-s390x-gnu.node')
+        )
+        try {
+          if (localFileExisted) {
+            nativeBinding = require('./amd-sev-snp-napi-rs.linux-s390x-gnu.node')
+          } else {
+            nativeBinding = require('amd-sev-snp-napi-rs-linux-s390x-gnu')
+          }
+        } catch (e) {
+          loadError = e
+        }
+        break
+      default:
+        throw new Error(`Unsupported architecture on Linux: ${arch}`)
+    }
+    break
+  default:
+    throw new Error(`Unsupported OS: ${platform}, architecture: ${arch}`)
+}
+
+if (!nativeBinding) {
+  if (loadError) {
+    throw loadError
+  }
+  throw new Error(`Failed to load native binding`)
+}
+
+const { SNP_REPORT_DATA_SIZE, KDS_CERT_SITE, KDS_VCEK, SHA256_BUFFER_SIZE, ARK_MILAN_PEM, ARK_GENOA_PEM, ARK_TURIN_PEM, ASK_MILAN_PEM, ASK_GENOA_PEM, ASK_TURIN_PEM, WellKnownSnpCodeNames, IMPORTANT_SECURITY_FIELDS_DUMMY, getSnpReport, getVcekKdsUrl, getReportData, getReportMeasure, getReportVmpl, getReportPolicy, getReportImportantSecurityFields, getReportCpuInfo, getCpuGeneration, getCpuInfo, getCpuSig, getLogicalCoresCount, calcSnpMeasure } = nativeBinding
+
+module.exports.SNP_REPORT_DATA_SIZE = SNP_REPORT_DATA_SIZE
+module.exports.KDS_CERT_SITE = KDS_CERT_SITE
+module.exports.KDS_VCEK = KDS_VCEK
+module.exports.SHA256_BUFFER_SIZE = SHA256_BUFFER_SIZE
+module.exports.ARK_MILAN_PEM = ARK_MILAN_PEM
+module.exports.ARK_GENOA_PEM = ARK_GENOA_PEM
+module.exports.ARK_TURIN_PEM = ARK_TURIN_PEM
+module.exports.ASK_MILAN_PEM = ASK_MILAN_PEM
+module.exports.ASK_GENOA_PEM = ASK_GENOA_PEM
+module.exports.ASK_TURIN_PEM = ASK_TURIN_PEM
+module.exports.WellKnownSnpCodeNames = WellKnownSnpCodeNames
+module.exports.IMPORTANT_SECURITY_FIELDS_DUMMY = IMPORTANT_SECURITY_FIELDS_DUMMY
+module.exports.getSnpReport = getSnpReport
+module.exports.getVcekKdsUrl = getVcekKdsUrl
+module.exports.getReportData = getReportData
+module.exports.getReportMeasure = getReportMeasure
+module.exports.getReportVmpl = getReportVmpl
+module.exports.getReportPolicy = getReportPolicy
+module.exports.getReportImportantSecurityFields = getReportImportantSecurityFields
+module.exports.getReportCpuInfo = getReportCpuInfo
+module.exports.getCpuGeneration = getCpuGeneration
+module.exports.getCpuInfo = getCpuInfo
+module.exports.getCpuSig = getCpuSig
+module.exports.getLogicalCoresCount = getLogicalCoresCount
+module.exports.calcSnpMeasure = calcSnpMeasure

package/bindings/usr/lib/node_modules/node-addon-api/node_api.Makefile

@@ -0,0 +1,6 @@
+# This file is generated by gyp; do not edit.
+
+export builddir_name ?= ./build/../../usr/lib/node_modules/node-addon-api/.
+.PHONY: all
+all:
+	$(MAKE) -C ../../../../nvidia-native/build nothing

package/bindings/usr/lib/node_modules/node-addon-api/nothing.target.mk

@@ -0,0 +1,159 @@
+# This file is generated by gyp; do not edit.
+
+TOOLSET := target
+TARGET := nothing
+DEFS_Debug := \
+	'-DNODE_GYP_MODULE_NAME=nothing' \
+	'-DUSING_UV_SHARED=1' \
+	'-DUSING_V8_SHARED=1' \
+	'-DV8_DEPRECATION_WARNINGS=1' \
+	'-D_GLIBCXX_USE_CXX11_ABI=1' \
+	'-D_FILE_OFFSET_BITS=64' \
+	'-D_LARGEFILE_SOURCE' \
+	'-D__STDC_FORMAT_MACROS' \
+	'-DOPENSSL_NO_PINSHARED' \
+	'-DOPENSSL_THREADS' \
+	'-DDEBUG' \
+	'-D_DEBUG'
+
+# Flags passed to all source files.
+CFLAGS_Debug := \
+	-fPIC \
+	-pthread \
+	-Wall \
+	-Wextra \
+	-Wno-unused-parameter \
+	-m64 \
+	-g \
+	-O0
+
+# Flags passed to only C files.
+CFLAGS_C_Debug :=
+
+# Flags passed to only C++ files.
+CFLAGS_CC_Debug := \
+	-fno-rtti \
+	-fno-exceptions \
+	-std=gnu++17
+
+INCS_Debug := \
+	-I/root/.cache/node-gyp/20.20.0/include/node \
+	-I/root/.cache/node-gyp/20.20.0/src \
+	-I/root/.cache/node-gyp/20.20.0/deps/openssl/config \
+	-I/root/.cache/node-gyp/20.20.0/deps/openssl/openssl/include \
+	-I/root/.cache/node-gyp/20.20.0/deps/uv/include \
+	-I/root/.cache/node-gyp/20.20.0/deps/zlib \
+	-I/root/.cache/node-gyp/20.20.0/deps/v8/include
+
+DEFS_Release := \
+	'-DNODE_GYP_MODULE_NAME=nothing' \
+	'-DUSING_UV_SHARED=1' \
+	'-DUSING_V8_SHARED=1' \
+	'-DV8_DEPRECATION_WARNINGS=1' \
+	'-D_GLIBCXX_USE_CXX11_ABI=1' \
+	'-D_FILE_OFFSET_BITS=64' \
+	'-D_LARGEFILE_SOURCE' \
+	'-D__STDC_FORMAT_MACROS' \
+	'-DOPENSSL_NO_PINSHARED' \
+	'-DOPENSSL_THREADS'
+
+# Flags passed to all source files.
+CFLAGS_Release := \
+	-fPIC \
+	-pthread \
+	-Wall \
+	-Wextra \
+	-Wno-unused-parameter \
+	-m64 \
+	-O3 \
+	-fno-omit-frame-pointer
+
+# Flags passed to only C files.
+CFLAGS_C_Release :=
+
+# Flags passed to only C++ files.
+CFLAGS_CC_Release := \
+	-fno-rtti \
+	-fno-exceptions \
+	-std=gnu++17
+
+INCS_Release := \
+	-I/root/.cache/node-gyp/20.20.0/include/node \
+	-I/root/.cache/node-gyp/20.20.0/src \
+	-I/root/.cache/node-gyp/20.20.0/deps/openssl/config \
+	-I/root/.cache/node-gyp/20.20.0/deps/openssl/openssl/include \
+	-I/root/.cache/node-gyp/20.20.0/deps/uv/include \
+	-I/root/.cache/node-gyp/20.20.0/deps/zlib \
+	-I/root/.cache/node-gyp/20.20.0/deps/v8/include
+
+OBJS := \
+	$(obj).target/$(TARGET)/../../usr/lib/node_modules/node-addon-api/nothing.o
+
+# Add to the list of files we specially track dependencies for.
+all_deps += $(OBJS)
+
+# CFLAGS et al overrides must be target-local.
+# See "Target-specific Variable Values" in the GNU Make manual.
+$(OBJS): TOOLSET := $(TOOLSET)
+$(OBJS): GYP_CFLAGS := $(DEFS_$(BUILDTYPE)) $(INCS_$(BUILDTYPE))  $(CFLAGS_$(BUILDTYPE)) $(CFLAGS_C_$(BUILDTYPE))
+$(OBJS): GYP_CXXFLAGS := $(DEFS_$(BUILDTYPE)) $(INCS_$(BUILDTYPE))  $(CFLAGS_$(BUILDTYPE)) $(CFLAGS_CC_$(BUILDTYPE))
+
+# Suffix rules, putting all outputs into $(obj).
+
+$(obj).$(TOOLSET)/$(TARGET)/%.o: $(srcdir)/%.c FORCE_DO_CMD
+	@$(call do_cmd,cc,1)
+
+# Try building from generated source, too.
+
+$(obj).$(TOOLSET)/$(TARGET)/%.o: $(obj).$(TOOLSET)/%.c FORCE_DO_CMD
+	@$(call do_cmd,cc,1)
+
+$(obj).$(TOOLSET)/$(TARGET)/%.o: $(obj)/%.c FORCE_DO_CMD
+	@$(call do_cmd,cc,1)
+
+# End of this set of suffix rules
+### Rules for final target.
+LDFLAGS_Debug := \
+	-pthread \
+	-rdynamic \
+	-m64
+
+LDFLAGS_Release := \
+	-pthread \
+	-rdynamic \
+	-m64
+
+LIBS :=
+
+$(obj).target/../../usr/lib/node_modules/node-addon-api/nothing.a: GYP_LDFLAGS := $(LDFLAGS_$(BUILDTYPE))
+$(obj).target/../../usr/lib/node_modules/node-addon-api/nothing.a: LIBS := $(LIBS)
+$(obj).target/../../usr/lib/node_modules/node-addon-api/nothing.a: TOOLSET := $(TOOLSET)
+$(obj).target/../../usr/lib/node_modules/node-addon-api/nothing.a: $(OBJS)
+	$(call create_archive,$@,$^)
+
+# Add target alias
+.PHONY: nothing
+nothing: $(obj).target/../../usr/lib/node_modules/node-addon-api/nothing.a
+
+# Add target alias to "all" target.
+.PHONY: all
+all: nothing
+
+# Add target alias
+.PHONY: nothing
+nothing: $(builddir)/nothing.a
+
+# Copy this to the static library output path.
+$(builddir)/nothing.a: TOOLSET := $(TOOLSET)
+$(builddir)/nothing.a: $(obj).target/../../usr/lib/node_modules/node-addon-api/nothing.a FORCE_DO_CMD
+	$(call do_cmd,copy)
+
+all_deps += $(builddir)/nothing.a
+# Short alias for building this static library.
+.PHONY: nothing.a
+nothing.a: $(obj).target/../../usr/lib/node_modules/node-addon-api/nothing.a $(builddir)/nothing.a
+
+# Add static library to "all" target.
+.PHONY: all
+all: $(builddir)/nothing.a
+