Method rtmr0_log

dstack-mr/src/tdvf.rs:299–427

(&self, machine: &Machine)

    }

    pub fn rtmr0_log(&self, machine: &Machine) -> Result<(RtmrLog, Tables)> {
        let td_hob_hash = self.measure_td_hob(machine.memory_size)?;
        let cfv_image_hash = hex!("344BC51C980BA621AAA00DA3ED7436F7D6E549197DFE699515DFA2C6583D95E6412AF21C097D473155875FFD561D6790");

        let tables = machine.build_tables()?;
        let acpi_tables_hash = measure_sha384(&tables.tables);
        let acpi_rsdp_hash = measure_sha384(&tables.rsdp);
        let acpi_loader_hash = measure_sha384(&tables.loader);

        let secureboot_hash =
            measure_tdx_efi_variable("8BE4DF61-93CA-11D2-AA0D-00E098032B8C", "SecureBoot")?;
        let pk_hash = measure_tdx_efi_variable("8BE4DF61-93CA-11D2-AA0D-00E098032B8C", "PK")?;
        let kek_hash = measure_tdx_efi_variable("8BE4DF61-93CA-11D2-AA0D-00E098032B8C", "KEK")?;
        let db_hash = measure_tdx_efi_variable("D719B2CB-3D3A-4596-A3BC-DAD00E67656F", "db")?;
        let dbx_hash = measure_tdx_efi_variable("D719B2CB-3D3A-4596-A3BC-DAD00E67656F", "dbx")?;
        let separator_hash = measure_sha384(&[0x00, 0x00, 0x00, 0x00]);

        let log = match machine.ovmf_variant {
            OvmfVariant::Pre202505 => {
                // Boot0000 = OVMF UiApp (fixed digest for pre-202505 firmware).
                let boot000_hash = hex!("23ADA07F5261F12F34A0BD8E46760962D6B4D576A416F1FEA1C64BC656B1D28EACF7047AE6E967C58FD2A98BFA74C298");
                vec![
                    td_hob_hash,
                    cfv_image_hash.to_vec(),
                    secureboot_hash,
                    pk_hash,
                    kek_hash,
                    db_hash,
                    dbx_hash,
                    separator_hash,
                    acpi_loader_hash,
                    acpi_rsdp_hash,
                    acpi_tables_hash,
                    measure_sha384(&[0x00, 0x00]), // BootOrder (raw 2 bytes in legacy OVMF)
                    boot000_hash.to_vec(),
                ]
            }
            OvmfVariant::Stable202505 => {
                // edk2-stable202505 emits 17 RTMR[0] events instead of 13. The
                // boot-option set is fully derivable from OVMF-internal
                // constants (FV and file GUIDs, descriptions, attributes); the
                // remaining two — the bootorder fw_cfg measurement and
                // EV_EFI_VARIABLE_AUTHORITY — stay as captured digests because
                // their content depends on QEMU's emitted device list and on
                // OVMF-internal logic that's not worth shadowing here.

                // fw_cfg `BootMenu` is a u16; dstack doesn't pass `-boot
                // menu=on`, so it defaults to 0x0000.
                let bootmenu_fwcfg_hash = measure_sha384(&[0x00, 0x00]);

                // fw_cfg `bootorder` is the NUL-separated list of QEMU device
                // paths whose backing devices have `bootindex` set. For
                // `-kernel` boot, QEMU (hw/i386/x86.c::x86_load_linux) injects
                // a single option ROM with `bootindex = 0`:
                //   * `linuxboot_dma.bin`  if fw_cfg DMA is enabled (q35 default)
                //   * `linuxboot.bin`      otherwise
                // dstack-vmm always uses q35 → DMA is on → the bootorder file
                // contains just the single path below (31 bytes, trailing