Crate igvmfilegen 

Implements a command line utility to generate IGVM files.

Modules

corim_signature 🔒

Support for patching CoRIM (Concise Reference Integrity Manifest) headers into an existing IGVM file.

file_loader 🔒

Implements a loader that serializes the loaded state into the IGVM binary format.

firmware_dll 🔒

Read an IGVM image from either a raw IGVM file or a vmfirmwareigvm resource DLL.

identity_mapping 🔒

Implements creation of JSON formatted launch measurement identity documents. This comes from Intel’s TD Identity Mapping, and has been expanded for SNP and VBS. This format allows verifiers to validate a COSE Sign1 payload, and correlate that to a launch measurement and SVN.

measurement_diag 🔒

Per-platform launch measurement diagnostics.

platform_mask 🔒

Helpers for resolving IgvmPlatformType <-> compatibility-mask mappings declared in an IGVM file’s platform headers, and for deriving human-readable / file-name-safe short names for each supported platform.

snp_id_block 🔒

SEV-SNP ID block generation and signing.

snp_linux_direct 🔒

Generation strategy for a self-contained SNP Linux-direct IGVM.

vp_context_builder 🔒

Defines the common VP context builder traits and methods for different isolation architectures.

Structs

PlatformMeta 🔒

Per-config measurement metadata captured during the build loop and consumed after merging to emit JSON identity documents and CoRIM launch endorsements.

Enums

CorimHeaderType 🔒

CoRIM header types for filtering

Options 🔒

Platform 🔒

IGVM platform types for CLI selection.

Traits

IgvmfilegenRegister 🔒

A trait to specialize behavior of the file builder based on different register types for different architectures. Different methods may need to be called depending on the register type that represents the given architecture.

Functions

add_snp_id_block_command 🔒

Add a SEV-SNP ID block to an existing IGVM file, either from an out-of-band signature (production) or signed with an ephemeral key (development/test).

build_endorsement_corim 🔒

Build a LaunchMeasurement template for the given platform’s launch measurement at the configured guest SVN.

build_endorsement_json 🔒

Build a JSON identity document for a platform measurement.

create_igvm_file 🔒

Create an IGVM file from the specified config

debug_validate_igvm_file 🔒

Validate that the serialized IGVM file round-trips through the parser and re-serializer producing identical structural headers.

dump_corim_headers 🔒

Dump CoRIM headers from an IGVM file.

load_image 🔒

Load an image.

load_linux 🔒

load_uefi 🔒

main 🔒

patch_corim_signature 🔒

Patch a CoRIM signature into an existing IGVM file.

sibling_path 🔒

Build a sibling path of output named <base>-<isolation><ext>, where base is output’s stem, <isolation> is derived from meta.platform, and ext includes the leading dot (e.g. ".json" or ".cbor").

snp_temporary_signing_metadata_from_config 🔒

Extract temporary-signing metadata from the single SNP guest config.

write_igvm_file_atomic 🔒

Atomically write data to output: write to a sibling temp file, then rename it into place. This prevents a crash or interruption during the write from corrupting the output (which may be the same file as the input for in-place edits). Same-volume renames are atomic on both POSIX and Windows (std::fs::rename uses MoveFileExW with MOVEFILE_REPLACE_EXISTING). log_message is emitted before the write.

write_platform_sibling 🔒

Write a per-platform sibling file (a JSON identity document, an SNP ID block signing payload, or a CoRIM launch endorsement) next to output, named <base>-<isolation><ext>. ext must include the leading dot.