[DISCUSSION] svsm: attestation + CocoonFs:

Nicolai Stange <[email protected]> Wed, 11 Mar 2026 05:29:30 +0100
Newsgroups dev.linux.lists.coconut-svsm
Message-ID <873427gf9x.fsf@>
Hi Tyler,

I've been told in one of the svsm devel calls that a capability for
storing some info in plaintext in CocoonFs would be helpful for your
attestation efforts.

Before I go and implement something, let me ask about the nature of that
data.
- What exactly are you planning to store there?
- Presumably the filesystem salt from the image header, supposed to also
  serve as a filesystem ID ([1]), is not sufficient?
- Is the data considered immutable over the lifetime of the FS?
- Is it Ok if that data is not authenticated?

Thanks!

Nicolai

[1] https://coconut-svsm.github.io/cocoon-tpm/cocoonfs/cocoonfs-format.html#image-header