Describe the bug
The latest version of trustauthority-cli has deprecated the 'trustauthority-cli quote' command, which is currently being used in our tests at this location: https://github.com/canonical/tdx/blob/main/tests/tests/quote/test_guest_ita.py#L105.
root@tdx-guest:~# trustauthority-cli version
Intel® Trust Authority CLI
Version: 1.9.0-
Build Date: 2025-05-22T10:42:37+00:00
root@tdx-guest:~# trustauthority-cli quote
The quote command is deprecated (see 'evidence' command)
To Reproduce
cd tests
./tdtest tests/quote/test_guest_ita.py::test_guest_measurement_trust_authority_success
Expected behavior
tests/quote/test_guest_ita.py::test_guest_measurement_trust_authority_success should pass
System report
Git ref
8720d5ded4778a40bfe4416fe512ce6cb9224e3d
Operating system details
Distributor ID: Ubuntu
Description: Ubuntu 24.04.2 LTS
Release: 24.04
Codename: noble
Kernel version
6.8.0-1028-intel #35-Ubuntu SMP PREEMPT_DYNAMIC Fri May 23 17:34:54 UTC 2025 x86_64 x86_64 GNU/Linux
TDX kernel logs
[ 0.000000] Command line: BOOT_IMAGE=/boot/vmlinuz-6.8.0-1028-intel root=UUID=8617a4cb-7c3d-4ca9-a741-4743cecc4ce0 ro nohibernate kvm_intel.tdx=1 nomodeset
[ 0.746609] Kernel command line: BOOT_IMAGE=/boot/vmlinuz-6.8.0-1028-intel root=UUID=8617a4cb-7c3d-4ca9-a741-4743cecc4ce0 ro nohibernate kvm_intel.tdx=1 nomodeset
[ 1.451968] virt/tdx: BIOS enabled: private KeyID range [64, 128)
[ 1.451972] virt/tdx: Disable ACPI S3. Turn off TDX in the BIOS to use ACPI S3.
[ 10.999373] virt/tdx: TDX module: attributes 0x0, vendor_id 0x8086, major_version 1, minor_version 5, build_date 20240129, build_num 698
[ 10.999377] virt/tdx: CMR: [0x100000, 0x77800000)
[ 10.999379] virt/tdx: CMR: [0x100000000, 0x107a000000)
[ 10.999380] virt/tdx: CMR: [0x1080000000, 0x207c000000)
[ 10.999381] virt/tdx: CMR: [0x2080000000, 0x307c000000)
[ 10.999381] virt/tdx: CMR: [0x3080000000, 0x407c000000)
...
[ 0.000000] Command line: BOOT_IMAGE=/boot/vmlinuz-6.8.0-1028-intel root=UUID=8617a4cb-7c3d-4ca9-a741-4743cecc4ce0 ro nohibernate kvm_intel.tdx=1 nomodeset
[ 0.746609] Kernel command line: BOOT_IMAGE=/boot/vmlinuz-6.8.0-1028-intel root=UUID=8617a4cb-7c3d-4ca9-a741-4743cecc4ce0 ro nohibernate kvm_intel.tdx=1 nomodeset
[ 1.451968] virt/tdx: BIOS enabled: private KeyID range [64, 128)
[ 1.451972] virt/tdx: Disable ACPI S3. Turn off TDX in the BIOS to use ACPI S3.
[ 10.999373] virt/tdx: TDX module: attributes 0x0, vendor_id 0x8086, major_version 1, minor_version 5, build_date 20240129, build_num 698
[ 10.999377] virt/tdx: CMR: [0x100000, 0x77800000)
[ 10.999379] virt/tdx: CMR: [0x100000000, 0x107a000000)
[ 10.999380] virt/tdx: CMR: [0x1080000000, 0x207c000000)
[ 10.999381] virt/tdx: CMR: [0x2080000000, 0x307c000000)
[ 10.999381] virt/tdx: CMR: [0x3080000000, 0x407c000000)
[ 11.810696] virt/tdx: 1050644 KB allocated for PAMT
[ 11.810701] virt/tdx: module initialized
TDX CPU instruction support
CPU supports TDX according to /proc/cpuinfo
Model specific registers (MSRs)
MK_TME_ENABLED bit: 1 (expected value: 1)
SEAM_RR bit: 1 (expected value: 1)
NUM_TDX_PRIV_KEYS: 40
SGX_AND_MCHECK_STATUS: 0 (expected value: 0)
Production platform: Production (expected value: Production)
CPU details
INTEL(R) XEON(R) PLATINUM 8570
QEMU package details
Status: Installed
Package: qemu-system-x86
Version: 2:8.2.2+ds-0ubuntu1.4+tdx1.1
APT-Sources: https://ppa.launchpadcontent.net/kobuk-team/tdx-release/ubuntu noble/main amd64 Packages
Libvirt package details
Status: Installed
Package: libvirt-clients
Version: 10.0.0-2ubuntu8.3+tdx1.2
APT-Sources: https://ppa.launchpadcontent.net/kobuk-team/tdx-release/ubuntu noble/main amd64 Packages
OVMF package details
Status: Installed
Package: ovmf
Version: 2024.02-3+tdx1.0
APT-Sources: https://ppa.launchpadcontent.net/kobuk-team/tdx-release/ubuntu noble/main amd64 Packages
sgx-dcap-pccs package details
Status: Installed
Package: sgx-dcap-pccs
Version: 1.21-0ubuntu1
APT-Sources: https://ppa.launchpadcontent.net/kobuk-team/tdx-attestation-release/ubuntu noble/main amd64 Packages
tdx-qgs package details
Status: Installed
Package: tdx-qgs
Version: 1.21-0ubuntu2.2
APT-Sources: https://ppa.launchpadcontent.net/kobuk-team/tdx-attestation-release/ubuntu noble/main amd64 Packages
sgx-ra-service package details
Status: Installed
Package: sgx-ra-service
Version: 1.21-0ubuntu2.2
APT-Sources: https://ppa.launchpadcontent.net/kobuk-team/tdx-attestation-release/ubuntu noble/main amd64 Packages
Description: Intel(R) Software Guard Extensions Multi-Package Registration Agent Service
sgx-pck-id-retrieval-tool package details
Status: Installed
Package: sgx-pck-id-retrieval-tool
Version: 1.21-0ubuntu2.2
APT-Sources: https://ppa.launchpadcontent.net/kobuk-team/tdx-attestation-release/ubuntu noble/main amd64 Packages
QGSD service status
● qgsd.service - Intel(R) TD Quoting Generation Service
Loaded: loaded (/usr/lib/systemd/system/qgsd.service; enabled; preset: enabled)
Active: active (running) since Fri 2025-06-20 15:25:21 PDT; 6h ago
Process: 3516 ExecStartPre=/bin/chown -R qgsd:qgsd /var/opt/qgsd/ (code=exited, status=0/SUCCESS)
Process: 3544 ExecStartPre=/bin/chmod 0750 /var/opt/qgsd/ (code=exited, status=0/SUCCESS)
Process: 3560 ExecStartPre=/usr/share/qgs/linksgx.sh (code=exited, status=0/SUCCESS)
Process: 3598 ExecStart=/usr/bin/qgs (code=exited, status=0/SUCCESS)
Main PID: 3604 (qgs)
Tasks: 5 (limit: 308490)
Memory: 12.1M (peak: 12.3M)
CPU: 258ms
CGroup: /system.slice/qgsd.service
└─3604 /usr/bin/qgs
Jun 20 22:16:42 sdp qgsd[3604]: process raw request [1024] bytes!.
Jun 20 22:16:42 sdp qgsd[3604]: unpack message successfully in thread [7758d4700740]
Jun 20 22:16:42 sdp qgsd[3604]: call tee_att_create_context
Jun 20 22:16:42 sdp qgsd[3604]: create context in thread[7758d2ffd6c0]
Jun 20 22:16:42 sdp qgsd[3604]: tee_att_init_quote return success
Jun 20 22:16:42 sdp qgsd[3604]: tee_att_get_quote_size return Success
Jun 20 22:16:42 sdp qgsd[3604]: tee_att_get_quote return Success
Jun 20 22:16:42 sdp qgsd[3604]: About to write response in thread [7758d2ffd6c0]
Jun 20 22:16:42 sdp qgsd[3604]: About to shutdown and close socket
Jun 20 22:16:42 sdp qgsd[3604]: erased a connection, now [0]
PCCS service status
● pccs.service - Provisioning Certificate Caching Service (PCCS)
Loaded: loaded (/usr/lib/systemd/system/pccs.service; enabled; preset: enabled)
Active: active (running) since Fri 2025-06-20 15:25:21 PDT; 6h ago
Docs: https://github.com/intel/SGXDataCenterAttestationPrimitives/blob/master/QuoteGeneration/pccs/README.md
Main PID: 3512 (node)
Tasks: 11 (limit: 308490)
Memory: 112.8M (peak: 123.1M)
CPU: 1.347s
CGroup: /system.slice/pccs.service
└─3512 /usr/bin/node /opt/intel/sgx-dcap-pccs/pccs_server.js
Jun 20 15:25:21 sdp systemd[1]: Started pccs.service - Provisioning Certificate Caching Service (PCCS).
Jun 20 15:25:23 sdp node[3512]: 2025-06-20 15:25:23.065 [info]: HTTPS Server is running on: https://localhost:8081
MPA registration logs (last 30 lines)
[20-06-2025 10:39:37] INFO: SGX Registration Agent version: 1.21.100.3
[20-06-2025 10:39:37] INFO: Starts Registration Agent Flow.
[20-06-2025 10:39:37] INFO: Registration Flow - Registration status indicates registration is completed successfully. MPA has nothing to do.
[20-06-2025 10:39:37] INFO: Finished Registration Agent Flow.
[20-06-2025 11:04:23] INFO: SGX Registration Agent version: 1.21.100.3
[20-06-2025 11:04:23] INFO: Starts Registration Agent Flow.
[20-06-2025 11:04:23] INFO: Registration Flow - Registration status indicates registration is completed successfully. MPA has nothing to do.
[20-06-2025 11:04:23] INFO: Finished Registration Agent Flow.
[20-06-2025 02:51:27] INFO: SGX Registration Agent version: 1.21.100.3
[20-06-2025 02:51:27] INFO: Starts Registration Agent Flow.
[20-06-2025 02:51:27] INFO: Registration Flow - Registration status indicates registration is completed successfully. MPA has nothing to do.
[20-06-2025 02:51:27] INFO: Finished Registration Agent Flow.
[20-06-2025 03:25:21] INFO: SGX Registration Agent version: 1.21.100.3
[20-06-2025 03:25:21] INFO: Starts Registration Agent Flow.
[20-06-2025 03:25:21] INFO: Registration Flow - Registration status indicates registration is completed successfully. MPA has nothing to do.
[20-06-2025 03:25:21] INFO: Finished Registration Agent Flow.
Describe the bug
The latest version of trustauthority-cli has deprecated the 'trustauthority-cli quote' command, which is currently being used in our tests at this location: https://github.com/canonical/tdx/blob/main/tests/tests/quote/test_guest_ita.py#L105.
root@tdx-guest:~# trustauthority-cli version
Intel® Trust Authority CLI
Version: 1.9.0-
Build Date: 2025-05-22T10:42:37+00:00
root@tdx-guest:~# trustauthority-cli quote
The quote command is deprecated (see 'evidence' command)
To Reproduce
cd tests
./tdtest tests/quote/test_guest_ita.py::test_guest_measurement_trust_authority_success
Expected behavior
tests/quote/test_guest_ita.py::test_guest_measurement_trust_authority_success should pass
System report
Git ref
Operating system details
Kernel version
TDX kernel logs
TDX CPU instruction support
Model specific registers (MSRs)
CPU details
QEMU package details
Libvirt package details
OVMF package details
sgx-dcap-pccs package details
tdx-qgs package details
sgx-ra-service package details
sgx-pck-id-retrieval-tool package details
QGSD service status
PCCS service status
MPA registration logs (last 30 lines)