Struct DstackTDXVerifierConfig 

pub struct DstackTDXVerifierConfig {
    pub app_compose: Option<Value>,
    pub allowed_tcb_status: Vec<String>,
    pub disable_runtime_verification: bool,
    pub expected_bootchain: Option<ExpectedBootchain>,
    pub os_image_hash: Option<String>,
    pub pccs_url: Option<String>,
    pub cache_collateral: bool,
}

Configuration for DstackTDXVerifier.

This struct holds all the expected values and settings for TDX verification.

Fields

app_compose: Option<Value>

Expected app compose configuration (as JSON Value for hash calculation).

The verifier will compute the hash of this configuration and compare it against the hash in the TCB info and event log.

allowed_tcb_status: Vec<String>

Allowed TCB statuses.

Only attestations with TCB status in this list will be accepted. Default: ["UpToDate"]

disable_runtime_verification: bool

Disable runtime verification (NOT RECOMMENDED).

When true, bootchain, app_compose, and os_image_hash verification will be skipped. This should only be used for testing.

expected_bootchain: Option<ExpectedBootchain>

Expected bootchain measurements.

If provided, the verifier will check that the attestation’s MRTD and RTMR0-2 match these expected values.

os_image_hash: Option<String>

Expected OS image hash.

The SHA256 hash of the OS image that should be running in the TD.

pccs_url: Option<String>

PCCS URL for collateral fetching.

If None, uses Intel’s default PCS endpoint.

cache_collateral: bool

Cache collateral to avoid repeated PCS fetches.

When true (default), collateral fetched from PCS will be cached and reused for subsequent verifications.

Trait Implementations

impl Clone for DstackTDXVerifierConfig

fn clone(&self) -> DstackTDXVerifierConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DstackTDXVerifierConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DstackTDXVerifierConfig

fn default() -> Self

Returns the “default value” for a type.