refactor(api): remove unused app info attestation mode

Drop the write-only AppInfo.attestation field and its backend, simulator, SDK, and documentation plumbing. GetQuoteResponse.attestation remains the platform-agnostic evidence field.

Author: kvinwang

dstack/guest-agent-simulator/src/main.rs

@@ -14,7 +14,7 @@ use dstack_guest_agent::{
     run_server, AppState,
 };
 use dstack_guest_agent_rpc::{AttestResponse, GetQuoteResponse};
-use ra_tls::attestation::{PlatformEvidence, VersionedAttestation};
+use ra_tls::attestation::VersionedAttestation;
 use serde::Deserialize;
 use tracing::warn;
 
@@ -89,17 +89,6 @@ impl PlatformBackend for SimulatorPlatform {
     fn attest_response(&self, report_data: [u8; 64]) -> Result<AttestResponse> {
         simulator::simulated_attest_response(&self.attestation, report_data, self.patch_report_data)
     }
-
-    fn attestation_mode(&self) -> Result<String> {
-        let mode = match self.attestation.clone().into_v1().platform {
-            PlatformEvidence::Tdx { .. } => "dstack-tdx",
-            PlatformEvidence::GcpTdx { .. } => "dstack-gcp-tdx",
-            PlatformEvidence::NitroEnclave { .. } => "dstack-nitro-enclave",
-            PlatformEvidence::AwsNitroTpm { .. } => "dstack-aws-nitro-tpm",
-            PlatformEvidence::SevSnp { .. } => "dstack-amd-sev-snp",
-        };
-        Ok(mode.to_string())
-    }
 }
 
 #[rocket::main]

dstack/guest-agent/rpc/proto/agent_rpc.proto

@@ -230,8 +230,6 @@ message AppInfo {
   string cloud_vendor = 15;
   // Cloud provider product_name (e.g. "Google Compute Engine")
   string cloud_product = 16;
-  // Detected dstack attestation mode, e.g. `dstack-tdx`, `dstack-aws-nitro-tpm`.
-  string attestation = 17;
 }
 
 // The response to a Version request

dstack/guest-agent/src/backend.rs

@@ -5,16 +5,13 @@
 use anyhow::{Context, Result};
 use dstack_guest_agent_rpc::{AttestResponse, GetQuoteResponse};
 use ra_tls::attestation::Attestation;
-use ra_tls::attestation::{AttestationMode, QuoteContentType, VersionedAttestation};
+use ra_tls::attestation::{QuoteContentType, VersionedAttestation};
 
 pub trait PlatformBackend: Send + Sync {
     fn attestation_for_info(&self) -> Result<VersionedAttestation>;
     fn certificate_attestation(&self, pubkey: &[u8]) -> Result<VersionedAttestation>;
     fn quote_response(&self, report_data: [u8; 64], vm_config: &str) -> Result<GetQuoteResponse>;
     fn attest_response(&self, report_data: [u8; 64]) -> Result<AttestResponse>;
-    /// The detected dstack attestation mode string (e.g. `dstack-tdx`),
-    /// surfaced in `AppInfo.attestation`.
-    fn attestation_mode(&self) -> Result<String>;
 }
 
 #[derive(Debug, Default)]
@@ -35,7 +32,7 @@ impl PlatformBackend for RealPlatform {
     }
 
     fn quote_response(&self, report_data: [u8; 64], vm_config: &str) -> Result<GetQuoteResponse> {
-        let attestation = Attestation::quote(&report_data).context("failed to get quote")?;
+        let attestation = Attestation::quote(&report_data).context("Failed to get quote")?;
         let tdx_quote = attestation.get_tdx_quote_bytes();
         let tdx_event_log = attestation.get_tdx_event_log_string_for_config(vm_config);
         // TDX callers already have quote + event_log. Only non-TDX platforms
@@ -58,13 +55,9 @@ impl PlatformBackend for RealPlatform {
     }
 
     fn attest_response(&self, report_data: [u8; 64]) -> Result<AttestResponse> {
-        let attestation = Attestation::quote(&report_data).context("failed to get attestation")?;
+        let attestation = Attestation::quote(&report_data).context("Failed to get attestation")?;
         Ok(AttestResponse {
             attestation: attestation.into_versioned().to_bytes()?,
         })
     }
-
-    fn attestation_mode(&self) -> Result<String> {
-        Ok(AttestationMode::detect()?.as_str().to_string())
-    }
 }

dstack/guest-agent/src/http_routes.rs

@@ -50,7 +50,6 @@ async fn index(state: &State<AppState>) -> Result<RawHtml<String>, String> {
         vm_config: _,
         cloud_vendor,
         cloud_product,
-        attestation: _,
     } = handler
         .info()
         .await

dstack/guest-agent/src/rpc_service.rs

@@ -179,10 +179,6 @@ impl AppState {
     fn attest_response(&self, report_data: [u8; 64]) -> Result<AttestResponse> {
         self.inner.platform.attest_response(report_data)
     }
-
-    fn attestation_mode(&self) -> Result<String> {
-        self.inner.platform.attestation_mode()
-    }
 }
 
 pub struct InternalRpcHandler {
@@ -251,7 +247,6 @@ pub async fn get_info(state: &AppState, external: bool) -> Result<AppInfo> {
         vm_config,
         cloud_vendor: read_dmi_file("sys_vendor"),
         cloud_product: read_dmi_file("product_name"),
-        attestation: state.attestation_mode()?,
     })
 }
 
@@ -855,10 +850,6 @@ pNs85uhOZE8z2jr8Pg==
                     attestation: VersionedAttestation::V1 { attestation }.to_bytes()?,
                 })
             }
-
-            fn attestation_mode(&self) -> Result<String> {
-                Ok("dstack-tdx".to_string())
-            }
         }
 
         let inner = AppStateInner {
@@ -1127,16 +1118,6 @@ pNs85uhOZE8z2jr8Pg==
         assert_eq!(normalize_algorithm("unknown"), "unknown");
     }
 
-    #[tokio::test]
-    async fn info_reports_attestation_mode() {
-        let (state, _guard) = setup_test_state().await;
-        let handler = InternalRpcHandler { state };
-
-        let info = handler.info().await.unwrap();
-
-        assert_eq!(info.attestation, "dstack-tdx");
-    }
-
     #[tokio::test]
     async fn test_get_key_k256_alias() {
         let (state, _guard) = setup_test_state().await;

sdk/curl/api.md

@@ -149,7 +149,7 @@ The `event_log` field contains a JSON array of TDX event log entries. For RTMR 0
 
 ### 4. Get Info
 
-Retrieves worker information, including the detected cloud platform and dstack attestation mode.
+Retrieves worker information, including the detected cloud platform.
 
 **Endpoint:** `/Info`
 
@@ -173,12 +173,11 @@ curl --unix-socket /var/run/dstack.sock http://dstack/Info
   "compose_hash": "<hex-encoded-compose-hash>",
   "vm_config": "<json-vm-config-string>",
   "cloud_vendor": "<detected-cloud-vendor>",
-  "cloud_product": "<detected-cloud-product>",
-  "attestation": "dstack-aws-nitro-tpm"
+  "cloud_product": "<detected-cloud-product>"
 }
 ```
 
-The `cloud_vendor`, `cloud_product`, and `attestation` fields report the detected cloud platform and dstack attestation mode (for example, `dstack-tdx` or `dstack-aws-nitro-tpm`).
+The `cloud_vendor` and `cloud_product` fields report the detected cloud platform.
 
 ### 5. Sign (not yet released)
 

sdk/go/dstack/client.go

@@ -162,8 +162,6 @@ type InfoResponse struct {
 	VmConfig     string `json:"vm_config,omitempty"`
 	CloudVendor  string `json:"cloud_vendor,omitempty"`
 	CloudProduct string `json:"cloud_product,omitempty"`
-	// Detected dstack attestation mode, e.g. "dstack-tdx", "dstack-aws-nitro-tpm".
-	Attestation string `json:"attestation,omitempty"`
 }
 
 // DecodeTcbInfo decodes the TcbInfo string into a TcbInfo struct

sdk/js/src/index.ts

@@ -91,8 +91,6 @@ export interface InfoResponse<VersionTcbInfo extends TcbInfo> {
   cloud_vendor?: string
   // Cloud provider product_name (e.g. "Google Compute Engine"). Available on dstack OS >= 0.5.7.
   cloud_product?: string
-  // Detected dstack attestation mode, e.g. "dstack-tdx", "dstack-aws-nitro-tpm".
-  attestation?: string
 }
 
 export interface GetQuoteResponse {

sdk/python/src/dstack_sdk/dstack_client.py

@@ -265,8 +265,6 @@ class InfoResponse(BaseModel, Generic[T]):
     cloud_vendor: str = ""
     # Cloud provider product_name (e.g. "Google Compute Engine"). Available on dstack OS >= 0.5.7.
     cloud_product: str = ""
-    # Detected dstack attestation mode, e.g. "dstack-tdx", "dstack-aws-nitro-tpm".
-    attestation: str = ""
 
     @classmethod
     def parse_response(cls, obj: Any, tcb_info_type: type[T]) -> "InfoResponse[T]":

sdk/rust/types/src/dstack.rs

@@ -199,9 +199,6 @@ pub struct InfoResponse {
     /// VM configuration
     #[serde(default)]
     pub vm_config: String,
-    /// Detected dstack attestation mode, e.g. `dstack-tdx`, `dstack-aws-nitro-tpm`.
-    #[serde(default)]
-    pub attestation: String,
 }
 
 impl InfoResponse {