Merge remote-tracking branch 'origin/master' into codex/pr752-dstack-volume

# Conflicts:
#	dstack/vmm/src/app/qemu.rs

Author: kvinwang

docs/aws-ec2-production-verifier-runbook.md

@@ -181,7 +181,7 @@ jq -e \
   .is_valid == true and
   .details.quote_verified == true and
   .details.report_data == $expected_report_data and
-  .details.boot_info.attestationMode == "dstack-aws-nitro-tpm" and
+  .details.boot_info.teeVariant == "dstack-aws-nitro-tpm" and
   .details.boot_info.tcbStatus == "UpToDate" and
   .details.boot_info.osImageHash == $expected_os_image_hash
 ' request.json.verification.json
@@ -226,9 +226,9 @@ key_provider_id })` and compare it to PCR8. dstack's own verifier and KMS do
 **not** check PCR8 — they rely on PCR14 replay — so it is not part of the
 required policy above.
 
-The `attestationMode` field is carried in the verified boot info for
+The `teeVariant` field is carried in the verified boot info for
 observability; a relying party may additionally assert
-`attestationMode == "dstack-aws-nitro-tpm"` against the verifier output, but the
+`teeVariant == "dstack-aws-nitro-tpm"` against the verifier output, but the
 authorization contract itself keys on the standard fields above.
 
 Same-account AWS KMS is not a trusted secret authority in this threat model if
@@ -261,7 +261,7 @@ Require the generated `endpoint-cert.pem.ratls-verification.json` to contain:
 ```bash
 jq -e '
   .is_valid == true and
-  .details.attestation_mode == "dstack-aws-nitro-tpm" and
+  .details.tee_variant == "dstack-aws-nitro-tpm" and
   .details.app_info.os_image_hash_verified == true
 ' endpoint-cert.pem.ratls-verification.json
 ```

dstack/Cargo.lock

@@ -69,6 +69,7 @@ members = [
     "crates/dstack-auth",
     "crates/api-auth",
     "crates/build-info",
+    "crates/mock-attestation",
 ]
 resolver = "2"
 

dstack/Cargo.toml

@@ -2,11 +2,16 @@
 //
 // SPDX-License-Identifier: Apache-2.0
 
+use std::sync::Arc;
+
 use anyhow::{Context, Result};
 use dstack_kms_rpc::{kms_client::KmsClient, SignCertRequest};
 use dstack_types::{AppKeys, KeyProvider};
 use ra_rpc::client::{RaClient, RaClientConfig};
-use ra_tls::cert::{generate_ra_cert, CaCert, CertSigningRequestV2};
+use ra_tls::{
+    attestation::AttestationVerifier,
+    cert::{generate_ra_cert, CaCert, CertSigningRequestV2},
+};
 
 pub enum CertRequestClient {
     Local {
@@ -54,7 +59,7 @@ impl CertRequestClient {
 
     pub async fn create(
         keys: &AppKeys,
-        pccs_url: Option<&str>,
+        attestation_verifier: Arc<AttestationVerifier>,
         vm_config: String,
     ) -> Result<CertRequestClient> {
         match &keys.key_provider {
@@ -79,7 +84,7 @@ impl CertRequestClient {
                     .tls_client_key(client_cert.key_pem)
                     .tls_ca_cert(keys.ca_cert.clone())
                     .tls_built_in_root_certs(false)
-                    .maybe_pccs_url(pccs_url.map(|s| s.to_string()))
+                    .attestation_verifier(attestation_verifier)
                     .build()
                     .into_client()
                     .context("Failed to create RA client")?;

dstack/cert-client/src/lib.rs

@@ -291,7 +291,7 @@ mod tests {
     #[test]
     fn deserializes_the_kms_bootinfo_wire_contract() {
         let wire = r#"{
-            "attestationMode": "dstack",
+            "teeVariant": "dstack",
             "mrAggregated": "0xAABB",
             "osImageHash": "0xC2AA",
             "mrSystem": "0xdead",

dstack/crates/dstack-auth/src/main.rs

@@ -0,0 +1,47 @@
+# SPDX-FileCopyrightText: © 2026 Phala Network <dstack@phala.network>
+#
+# SPDX-License-Identifier: Apache-2.0
+
+[package]
+name = "mock-attestation"
+version.workspace = true
+authors.workspace = true
+edition.workspace = true
+license.workspace = true
+description = "Development-only cryptographically valid attestation evidence generator"
+
+[[bin]]
+name = "dstack-mock-attestation"
+path = "src/main.rs"
+
+[dependencies]
+anyhow.workspace = true
+clap.workspace = true
+fs-err.workspace = true
+rcgen.workspace = true
+ciborium.workspace = true
+p384 = { workspace = true, features = ["ecdsa", "pkcs8"] }
+p256 = { workspace = true, features = ["ecdsa", "pkcs8"] }
+sha2.workspace = true
+sev.workspace = true
+sev-snp-qvl.workspace = true
+tpm-types.workspace = true
+tpm-qvl.workspace = true
+dstack-types.workspace = true
+dcap-qvl.workspace = true
+scale.workspace = true
+yasna.workspace = true
+chrono.workspace = true
+rand.workspace = true
+tokio = { workspace = true, features = ["full"] }
+axum = "0.8"
+hex.workspace = true
+urlencoding = "2"
+reqwest.workspace = true
+serde.workspace = true
+serde_json.workspace = true
+time.workspace = true
+
+[dev-dependencies]
+tempfile.workspace = true
+nsm-qvl.workspace = true