Switch license to https://unlicense.org/

.gitignore

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: Unlicense
+
 dtrfs.tar
 build
 tmp

LICENSE

@@ -0,0 +1,24 @@
+This is free and unencumbered software released into the public domain.
+
+Anyone is free to copy, modify, publish, use, compile, sell, or
+distribute this software, either in source code form or as a compiled
+binary, for any purpose, commercial or non-commercial, and by any
+means.
+
+In jurisdictions that recognize copyright laws, the author or authors
+of this software dedicate any and all copyright interest in the
+software to the public domain. We make this dedication for the benefit
+of the public at large and to the detriment of our heirs and
+successors. We intend this dedication to be an overt act of
+relinquishment in perpetuity of all present and future rights to this
+software under copyright law.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+
+For more information, please refer to <https://unlicense.org/>

README.md

@@ -1,3 +1,7 @@
+<!--
+SPDX-License-Identifier: Unlicense
+-->
+
 ## OS template
 
 You will need a working OS template to work with this project.

dtrfs_api/Cargo.lock

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: Unlicense
+
 # This file is automatically @generated by Cargo.
 # It is not intended for manual editing.
 version = 4

dtrfs_api/Cargo.toml

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: Unlicense
+
 [package]
 name = "dtrfs_api"
 version = "0.1.0"

dtrfs_api/rustfmt.toml

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: Unlicense
+
 reorder_impl_items = true
 use_small_heuristics = "Max"
 merge_imports = true

dtrfs_api/src/main.rs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Unlicense
+
 mod os;
 mod snp;
 
@@ -84,6 +86,7 @@ async fn get_report() -> HttpResponse {
 
 #[derive(Deserialize)]
 struct InstallForm {
+    hostname: String,
     url: String,
     sha: String,
     keyfile: String,
@@ -95,7 +98,7 @@ async fn post_install_form(req: HttpRequest, form: web::Form<InstallForm>) -> Ht
     if let Err(e) = verify(&req) {
         return HttpResponse::BadRequest().body(format!("Signature verification failed: {}", e));
     };
-    match os::encrypt_and_install_os(&form.url, &form.sha, &form.keyfile) {
+    match os::encrypt_and_install_os(&form.url, &form.sha, &form.keyfile, &form.hostname) {
         Ok(s) => HttpResponse::Ok().body(s),
         Err(e) => HttpResponse::InternalServerError().body(format!("{e:?}")),
     }

dtrfs_api/src/os.rs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Unlicense
+
 use crate::snp::get_derived_key;
 use anyhow::{anyhow, Result};
 use base64::prelude::{Engine, BASE64_URL_SAFE};
@@ -15,6 +17,7 @@ pub fn encrypt_and_install_os(
     install_url: &str,
     install_sha: &str,
     keyfile: &str,
+    vm_hostname: &str,
 ) -> Result<String> {
     let binary_keyfile = BASE64_URL_SAFE.decode(keyfile)?;
     std::fs::write(BACKUP_KEYFILE_PATH, binary_keyfile)?;
@@ -24,6 +27,7 @@ pub fn encrypt_and_install_os(
         .env("INSTALL_SHA", install_sha)
         .env("SNP_KEY_FILE", SNP_KEYFILE_PATH)
         .env("ROOT_KEYFILE", BACKUP_KEYFILE_PATH)
+        .env("VM_HOSTNAME", vm_hostname)
         .output()?;
 
     if !install_result.status.success() {

dtrfs_api/src/snp.rs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Unlicense
+
 use anyhow::{Context, Result};
 use sev::firmware::guest::{AttestationReport, DerivedKey, Firmware, GuestFieldSelect};
 use base64::prelude::{Engine, BASE64_URL_SAFE};

scripts/arch_guest_mods

@@ -126,5 +126,6 @@ xt_nat
 xt_nfacct
 xt_NFLOG
 xt_physdev
+xt_REDIRECT
 xt_set
 xt_tcpudp

scripts/create.sh

@@ -1,4 +1,7 @@
 #!/bin/bash
+
+# SPDX-License-Identifier: Unlicense
+
 cd -- "$( dirname -- "${BASH_SOURCE[0]}" )"
 source creator_exports.sh
 source creator_functions.sh

scripts/creator_exports.sh

@@ -1,4 +1,7 @@
 #!/bin/bash
+
+# SPDX-License-Identifier: Unlicense
+
 script_dir=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
 
 # root of the initrd, that will be used to create the cpio archive

scripts/creator_functions.sh

@@ -1,5 +1,7 @@
 #!/bin/bash
 
+# SPDX-License-Identifier: Unlicense
+
 echo_cyan() {
   echo -e "\033[0;36m$1\033[0m"
 }

scripts/init.sh

@@ -1,4 +1,7 @@
 #!/bin/bash
+
+# SPDX-License-Identifier: Unlicense
+
 source /usr/lib/dtrfs/init_functions.sh
 
 install_url="/tmp/detee_install_url"

scripts/init_functions.sh

@@ -1,5 +1,7 @@
 #!/bin/bash
 
+# SPDX-License-Identifier: Unlicense
+
 load_modules() {
   cat /load_modules.sh | bash
 }

scripts/install_os.sh

@@ -1,5 +1,7 @@
 #!/bin/bash
 
+# SPDX-License-Identifier: Unlicense
+
 # This script is called by dtrfs_api to install an OS.
 
 [[ -z "$INSTALL_URL" ]] && {
@@ -7,11 +9,16 @@
   exit 1
 }
 
-[[ -z "$INSTALL_URL" ]] && {
+[[ -z "$INSTALL_SHA" ]] && {
   echo "Did not find INSTALL_SHA env variable".
   exit 2
 }
 
+[[ -z "$VM_HOSTNAME" ]] && {
+  echo "Did not find VM_HOSTNAME env variable".
+  exit 2
+}
+
 [[ -f "$ROOT_KEYFILE" ]] || {
   echo "Did not find keyfile at the following location: $ROOT_KEYFILE"
   exit 3
@@ -55,9 +62,8 @@ fsarchiver restdir /mnt/template.fsa /
 rm /mnt/template.fsa
 # TODO: decide for UX if maybe we should allow user to inject fstab
 echo "" > /mnt/etc/fstab
-hostname=$(cat /proc/cmdline | grep -oE 'detee_name=[0-9a-z\_\.\-]+' | cut -d '=' -f2)
+echo "=== Setting up guest hostname as $VM_HOSTNAME"
-echo "=== Setting up guest hostname as $hostname"
+echo $VM_HOSTNAME > /mnt/etc/hostname
-[[ -n "$hostname" ]] && echo $hostname > /mnt/etc/hostname
 
 echo "=== Generating SSH public keys"
 echo "root:x:0:0:root:/root:/bin/sh" > /etc/passwd

scripts/remote_create.sh

@@ -1,4 +1,7 @@
 #!/bin/bash
+
+# SPDX-License-Identifier: Unlicense
+
 cd -- "$( dirname -- "${BASH_SOURCE[0]}" )"
 
 dir="/tmp/dtrfs"

scripts/upload_to_registry.sh

@@ -1,5 +1,7 @@
 #!/bin/bash
 
+# SPDX-License-Identifier: Unlicense
+
 kernel_path="/boot/vmlinuz-linux"
 
 dtrfs_path="$1"