10 June 2025

[donporter]

Agenda:

[monavij]

Discuss Release 1.9 progress
Discuss plans after 1.9 release
Discuss Gramine-TDX PAL move to main project

[kailun-qin]

(Potential) Work items for integrating Gramine-TDX into core Gramine

1. Rebase Gramine-TDX onto Gramine v1.9

• Currently rebased onto ac61ae1, positioned between versions v1.7 and v1.8.
• Manual testing is required post-rebase.

2. Add testing infrastructure (CI)

• Currently no automated CI; only bash scripts for manual workload execution (requiring patches to some Makefiles and Gramine manifest templates).
• How do we set up a TDX machine?
• How can we run a subset of current Gramine tests (to exclude multi-process apps for the TDX PAL)? Do we change core Gramine?

3. Review and merge non-PAL code modifications required for Gramine-TDX

• common:
  • gramineproject/gramine-tdx@5b141dc#diff-77a09196451a8bacdfdc8498bc883e85acd2753bcde4a4a05bbdac48e4037aa1
• LibOS:
  • gramineproject/gramine-tdx@24e2954#diff-f14201953ec748e1423e9e9a5446e7934d77f8db9651d2b2433708497662c2cb
  • gramineproject/gramine-tdx@c14582e
  • gramineproject/gramine-tdx@114837e
• subprojects:
  • gramineproject/gramine-tdx@661e06c
  • gramineproject/gramine-tdx@e95a3a1
• existing-PALs-related:
  • gramineproject/gramine-tdx@4ae43fe
• Gramine-VM/TDX bash template:
  • gramine-vm.in
• Other considerations:
  • TDX-specific manifest (currently reusing SGX manifest; warnings for non-TDX-applicable settings?).
  • Single-process limitation (disabling multi-processing for the VM/TDX PAL?).
  • Docs? Debugging limitations?

4. Discuss and agree on the high-level design and code structure of the VM and TDX PALs

• How should we review and merge these?

[donporter]

Release: 2 PRs remaining, should be able to deploy by end of June.

Post-Release: Focus on merging Gramine TDX, and advertise TDX as an option in readme.

• Need a plan to set up CI with VMs - prioritize CI
• Need to reduce the need for rebasing to keep the repos in sync
• Perhaps review/merge the libos changes and keep the PAL as a submodule to reduce rebases?

Request help with merging Erica's PRs. Don can nudge people for a second review.