From 7d2c4b37b888e9957dafa5743d6b1f9c06574cc7 Mon Sep 17 00:00:00 2001
From: Zixi Chen <zixchen@redhat.com>
Date: Tue, 3 Dec 2024 17:22:45 +0800
Subject: [PATCH] Add snp attestation guest test script

Signed-off-by: Zixi Chen <zixchen@redhat.com>
---
 .../sev-snp/regular_attestation_workflow.sh   | 48 +++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100644 qemu/deps/sev-snp/regular_attestation_workflow.sh

diff --git a/qemu/deps/sev-snp/regular_attestation_workflow.sh b/qemu/deps/sev-snp/regular_attestation_workflow.sh
new file mode 100644
index 0000000000..f280e2b96b
--- /dev/null
+++ b/qemu/deps/sev-snp/regular_attestation_workflow.sh
@@ -0,0 +1,48 @@
+#!/bin/bash
+set -e
+
+fetch_retry() {
+    local command=$1
+    local max_retries=3
+    local retry_count=0
+
+    while (( retry_count < max_retries )); do
+        eval "$command"
+        if [[ $? -eq 0 ]]; then
+            return 0
+        fi
+        retry_count=$((retry_count + 1))
+        echo "Command '$command' failed. Retry $retry_count/$max_retries in 20s..."
+        sleep 20
+    done
+    echo "Command '$command' failed after $max_retries attempts."
+    return 1
+}
+
+# Verify regular attestation workflow on snp guest
+snpguest report attestation-report.bin request-data.txt --random
+snpguest display report attestation-report.bin
+
+# Get cpu model
+cpu_familly_id=$(cat /proc/cpuinfo | grep 'cpu family' | head -1 | cut -d ":" -f 2 | tr -d " ")
+model_id=$(cat /proc/cpuinfo | grep 'model' | head -1 | cut -d ":" -f 2 | tr -d " ")
+dict_cpu=([251]="milan" [2517]="genoa")
+cpu_model=${dict_cpu[${cpu_familly_id}${model_id}]}
+
+# Fetch cert
+set +e
+fetch_retry "snpguest fetch ca pem ${cpu_model} ./ -e vcek"
+if [[ $? -ne 0 ]]; then
+   echo "ok"
+   exit 1
+fi
+
+fetch_retry "snpguest fetch vcek pem ${cpu_model} ./ attestation-report.bin"
+if [[ $? -ne 0 ]]; then
+    exit 1
+fi
+
+# Verify certs
+set -e
+snpguest verify certs ./
+snpguest verify attestation ./ attestation-report.bin