Skip to content

guest: support development-only no-TEE VMs#766

Draft
h4x3rotab wants to merge 1 commit into
masterfrom
agent/dev-no-tee
Draft

guest: support development-only no-TEE VMs#766
h4x3rotab wants to merge 1 commit into
masterfrom
agent/dev-no-tee

Conversation

@h4x3rotab

@h4x3rotab h4x3rotab commented Jul 10, 2026

Copy link
Copy Markdown
Contributor

Summary

  • add development-only no-TEE VMs for local testing
  • use temporary unattested app keys and fail attestation APIs closed
  • disable disk encryption and reject TEE-dependent compose settings
  • document the maintainer workflow in CONTRIBUTING.md

Safety

No-TEE mode requires a development image and key_provider=none. It rejects gateway use, TEE requirements, and image command-line overrides. TEE mode cannot change after VM creation, and no-TEE guests always boot with storage encryption disabled.

Tests

  • cargo test -p dstack-vmm -p dstack-util -p dstack-guest-agent -p cert-client
  • cargo clippy -p cert-client -p dstack-guest-agent -p dstack-util -p dstack-vmm --all-targets
  • npm run build in vmm/ui
  • bash -n basefiles/dstack-prepare.sh
  • python3 -m py_compile vmm/src/vmm-cli.py
  • prek run --files CONTRIBUTING.md

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant