Skip to content

CUBE-135 - Enable tdx on cloud init local#139

Open
WashingtonKK wants to merge 4 commits intoultravioletrs:mainfrom
WashingtonKK:cube-135
Open

CUBE-135 - Enable tdx on cloud init local#139
WashingtonKK wants to merge 4 commits intoultravioletrs:mainfrom
WashingtonKK:cube-135

Conversation

@WashingtonKK
Copy link
Contributor

@WashingtonKK WashingtonKK commented Jan 27, 2026

What type of PR is this?

What does this do?

Which issue(s) does this PR fix/relate to?

Have you included tests for your changes?

Did you document any new/modified features?

Notes

================================================

[ 0.000000] tdx: Guest detected
[ 0.000000] Linux version 6.8.0-90-generic (buildd@lcy02-amd64-092) (x86_64-linux-gnu-gcc-13 (Ubuntu 13.3.0-6ubuntu2~24.04) 13.3.0, GNU ld (GNU Binutils for Ubuntu) 2.42) #91-Ubuntu SMP PREEMPT_DYNAMIC Tue Nov 18 14:14:30 UTC 2025 (Ubuntu 6.8.0-90.91-generic 6.8.12)
[ 0.000000] Command line: BOOT_IMAGE=/vmlinuz-6.8.0-90-generic root=LABEL=cloudimg-rootfs ro console=tty1 console=ttyS0
[ 0.000000] KERNEL supported cpus:
[ 0.000000] Intel GenuineIntel
[ 0.000000] AMD AuthenticAMD
[ 0.000000] Hygon HygonGenuine
[ 0.000000] Centaur CentaurHauls
[ 0.000000] zhaoxin Shanghai
[ 0.000000] x86/split lock detection: #DB: warning on user-space bus_locks
[ 0.000000] BIOS-provided physical RAM map:

=================================================

[ 204.078813] cloud-init[1159]: Cube Agent (TDX) and Ollama services started.
[ OK ] Finished cloud-final.service - Cloud-init: Final Stage.
[ OK ] Reached target cloud-init.target - Cloud-init target.

cube-ai-vm login: ultraviolet
Password:

ultraviolet@cube-ai-vm:~$ systemctl status cube-agent -l --no-pager
● cube-agent.service - Cube Agent Service
Loaded: loaded (/etc/systemd/system/cube-agent.service; enabled; preset: enabled)
Active: active (running) since Tue 2026-01-27 14:47:52 UTC; 2min 4s ago
Main PID: 10843 (cube-agent)
Tasks: 8 (limit: 17971)
Memory: 2.8M (peak: 3.6M)
CPU: 15ms
CGroup: /system.slice/cube-agent.service
└─10843 /usr/local/bin/cube-agent

Warning: some journal files were not opened due to insufficient permissions.
ultraviolet@cube-ai-vm:~$ systemctl status ollama -l --no-pager
● ollama.service - Ollama Service
Loaded: loaded (/etc/systemd/system/ollama.service; enabled; preset: enabled)
Active: active (running) since Tue 2026-01-27 14:47:52 UTC; 2min 12s ago
Main PID: 10774 (ollama)
Tasks: 19 (limit: 17971)
Memory: 2.5G (peak: 2.5G)
CPU: 1min 23.250s
CGroup: /system.slice/ollama.service
└─10774 /usr/local/bin/ollama serve

Copy link
Contributor

@SammyOina SammyOina left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

test and add logs on the pr description showing the guest which agent detected

# TDX Setup for Ubuntu 24.04+
# Ubuntu 24.04 (Noble) has TDX guest support built into the kernel
# No additional kernel installation or module loading is required
# The kernel CONFIG_INTEL_TDX_GUEST is enabled by default
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is not true please test and check that the config actualluy works https://github.com/absmach/propeller/blob/main/hal/ubuntu/qemu.sh

echo "Starting QEMU VM in regular mode (no CVM)..."

create_ovmf_vars_copy
create_seed_image "${SCRIPT_DIR}/user-data-tdx.yaml"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

regular vm is using tdx?

@SammyOina
Copy link
Contributor

add snp logs as well

@WashingtonKK WashingtonKK deleted the cube-135 branch February 11, 2026 16:22
@WashingtonKK WashingtonKK restored the cube-135 branch February 12, 2026 11:54
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com>
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com>
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com>
Signed-off-by: WashingtonKK <washingtonkigan@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Enable tdx on cloud init local

2 participants