fix: clarify prereq, installed, post-inst - #480
Conversation
Signed-off-by: Mike McKiernan <mmckiernan@nvidia.com>
Documentation preview |
mikemckiernan
left a comment
mikemckiernan
left a comment
There was a problem hiding this comment.
More of a question.
| - Version | ||
| - When It Is Needed | ||
| - How It Is Provided | ||
| * - `Key Broker Service (KBS) protocol <https://confidentialcontainers.org/docs/attestation/>`__ |
There was a problem hiding this comment.
@fitzthum @fidencio - I think we need a bit of a refinement here. I think the KBS protocol is installed implicitly by shipping the attestation agent, CDH in our guests. So, I think here we want to say that trustee is not installed - and provide a specific trustee version to install, instead.
Then, in above listing for Kata Containers we can say that this comes with a guest using the 0.4.0 KBS protocol. This may make it easier here in turn because we can say to install a trustee version using that same protocol version (or, a protocol version that is compatible, if a patch version increment of the protocol version means that both are still interoperable).
I really like this, thank you for these changes! I left one comment for discussion. |
| .. flat-table:: | ||
| :header-rows: 1 | ||
|
|
||
| * - Interface or Component |
There was a problem hiding this comment.
@mikemckiernan - if or as we make this change, we could also list genpolicy - we should then merge #479 after this one.
There was a problem hiding this comment.
Let's either merge this one first, then adjust #479, or vice versa.
Signed-off-by: Mike McKiernan <mmckiernan@nvidia.com>
| * - NVIDIA B200 | ||
| - Single-GPU, Multi-GPU | ||
|
|
||
| * - NVIDIA HGX B300 |
There was a problem hiding this comment.
Why do we call out HGX here but not the other rows?
My understanding is that HGX is a platform reference design (inclusive of GPU, switch, CPU) productized by various OEMs. Seems like it should be on all of these rows or none of them. I may certainly be ignorant of other context around HGX though.
| * - Artifact | ||
| - Release/Version | ||
| * - Guest OS | ||
| - Distroless |
There was a problem hiding this comment.
@manuelh-dev
Is there something more specific we can list here?
I think it's a specific nvidia flavored chiseled os including nvrc.
Is there an upstream kata link to something like a manifest?
3 participants
No description provided.