feat(vmm): pass a launch ticket to the guest without returning it

Signed-off-by: Kevin Wang <wy721@qq.com>

Author: kvinwang

dstack/vmm/rpc/proto/vmm_rpc.proto

@@ -151,6 +151,10 @@ message VmConfiguration {
   // it with the VM and returns it here; it never interprets it, passes it to
   // the guest, or measures it.
   map<string, string> annotations = 23;
+  // Launch ticket the guest presents to the KMS, whose hash the app's
+  // contract must allow (see dstack/kms/README.md#launch-tickets). The VMM
+  // passes it to the guest's sys-config and never returns it.
+  string launch_ticket = 25;
 }
 
 // Per-VM networking configuration.
@@ -246,6 +250,8 @@ message UpdateVmRequest {
   // Optional update annotations, replacing them all.
   bool update_annotations = 21;
   map<string, string> annotations = 22;
+  // Optional update launch ticket; an empty one removes it.
+  optional string launch_ticket = 25;
 }
 
 // Parameters for listing CVMs with pagination and filtering.

dstack/vmm/src/app.rs

@@ -147,6 +147,9 @@ pub struct Manifest {
     /// Opaque metadata for host-side tooling; see `VmConfiguration.annotations`.
     #[serde(default, skip_serializing_if = "BTreeMap::is_empty")]
     pub annotations: BTreeMap<String, String>,
+    /// Written to the guest's sys-config, never returned by the RPCs.
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub launch_ticket: Option<String>,
 }
 
 impl Manifest {
@@ -2152,6 +2155,9 @@ pub(crate) fn make_sys_config(
     if cfg.cvm.guest_agent_api != Default::default() {
         sys_config["guest_agent_api"] = serde_json::to_value(&cfg.cvm.guest_agent_api)?;
     }
+    if let Some(ticket) = &manifest.launch_ticket {
+        sys_config["launch_ticket"] = ticket.as_str().into();
+    }
     // No attestation trust anchor is ever written here. Simulated deployments
     // receive only the development seed through `.tee-simulator.json`; the
     // in-guest simulator derives the matching roots itself and publishes them
@@ -3675,6 +3681,7 @@ mod tests {
             volumes: vec![],
             disk_prealloc: DiskPrealloc::Off,
             annotations: Default::default(),
+            launch_ticket: None,
         }
     }
 
@@ -4052,6 +4059,7 @@ mod tests {
             volumes: vec![],
             disk_prealloc: DiskPrealloc::Off,
             annotations: Default::default(),
+            launch_ticket: Some("t".repeat(32)),
         };
 
         let mr_config = MrConfigV3::new(
@@ -4113,6 +4121,12 @@ mod tests {
                 .as_str()
                 .context("vm_config must be a string")?,
         )?;
+        // The ticket reaches the guest, but never vm_config, which attestations embed.
+        assert_eq!(sys_config["launch_ticket"], "t".repeat(32));
+        assert!(!sys_config["vm_config"]
+            .as_str()
+            .unwrap()
+            .contains(&"t".repeat(32)));
         let measurement_document = vm_config["sev_snp_measurement"]
             .as_str()
             .context("sev_snp_measurement must be a string")?;

dstack/vmm/src/app/qemu.rs

@@ -1484,6 +1484,7 @@ mod tests {
                 }],
                 disk_prealloc: DiskPrealloc::Off,
                 annotations: Default::default(),
+                launch_ticket: None,
             },
             image: Image {
                 info: ImageInfo {

dstack/vmm/src/app/vm_info.rs

@@ -245,6 +245,8 @@ impl VmInfo {
                     networking: configured_networking,
                     networks: configured_networks,
                     annotations: self.manifest.annotations.clone().into_iter().collect(),
+                    // A secret the VMM passes to the guest and never returns.
+                    launch_ticket: String::new(),
                 })
             },
             app_url: self

dstack/vmm/src/main_service.rs

@@ -392,9 +392,20 @@ pub fn create_manifest_from_vm_config(
         volumes,
         disk_prealloc,
         annotations: annotations_from_proto(&request.annotations)?,
+        launch_ticket: launch_ticket_from_proto(&request.launch_ticket)?,
     })
 }
 
+/// Refuse a ticket the KMS would refuse, so the mistake surfaces here rather
+/// than at boot. Empty means none.
+fn launch_ticket_from_proto(ticket: &str) -> Result<Option<String>> {
+    if ticket.is_empty() {
+        return Ok(None);
+    }
+    dstack_types::authorization::check_launch_ticket(ticket).map_err(anyhow::Error::msg)?;
+    Ok(Some(ticket.to_string()))
+}
+
 fn annotations_from_proto(
     annotations: &HashMap<String, String>,
 ) -> Result<BTreeMap<String, String>> {
@@ -1185,6 +1196,9 @@ impl VmmRpc for RpcHandler {
         if request.update_gateway_urls {
             manifest.gateway_urls = request.gateway_urls.clone();
         }
+        if let Some(ticket) = &request.launch_ticket {
+            manifest.launch_ticket = launch_ticket_from_proto(ticket)?;
+        }
         if request.update_annotations {
             manifest.annotations = annotations_from_proto(&request.annotations)?;
         }
@@ -1572,6 +1586,7 @@ mod tests {
             networks: vec![],
             disk_prealloc: None,
             annotations: Default::default(),
+            launch_ticket: String::new(),
         }
     }
 

dstack/vmm/ui/src/components/CreateVmDialog.ts

@@ -197,6 +197,11 @@ const CreateVmDialogComponent = {
               <textarea id="userConfig" v-model="form.user_config" placeholder="Optional user config placed at /dstack/.user-config in the CVM"></textarea>
             </div>
 
+            <div class="form-group full-width">
+              <label for="launchTicket">Launch Ticket</label>
+              <input id="launchTicket" type="password" autocomplete="off" v-model="form.launch_ticket" placeholder="Optional: presented to the KMS; its hash must be allowed by the app contract">
+            </div>
+
             <div class="form-group full-width">
               <label for="annotations">Annotations</label>
               <textarea id="annotations" v-model="form.annotations" placeholder="Optional KEY=VALUE per line, for host-side tooling; never passed to the CVM"></textarea>

dstack/vmm/ui/src/components/UpdateVmDialog.ts

@@ -259,6 +259,11 @@ const UpdateVmDialogComponent = {
           <textarea id="upgradeUserConfig" v-model="dialog.user_config" placeholder="Optional: User config to be put at /dstack/.user-config in the CVM"></textarea>
         </div>
 
+        <div class="form-group">
+          <label for="upgradeLaunchTicket">Launch Ticket</label>
+          <input id="upgradeLaunchTicket" type="password" autocomplete="off" v-model="dialog.launch_ticket" placeholder="Optional: replace the launch ticket; leave empty to keep it">
+        </div>
+
         <div class="dialog-footer">
           <button class="action-btn primary" @click="$emit('submit')">Update</button>
           <button class="action-btn" @click="$emit('close')">Cancel</button>

dstack/vmm/ui/src/composables/useVmManager.ts

@@ -192,6 +192,7 @@ type VmFormState = {
   networks: NetworkFormEntry[];
   user_config: string;
   annotations: string;
+  launch_ticket: string;
   kms_urls: string[];
   gateway_urls: string[];
   stopped: boolean;
@@ -223,6 +224,7 @@ type UpdateDialogState = {
   updateNetworking: boolean;
   networks: NetworkFormEntry[];
   user_config: string;
+  launch_ticket: string;
 };
 
 type CloneConfigDialogState = {
@@ -285,6 +287,7 @@ function createVmFormState(preLaunchScript: string): VmFormState {
     networks: [],
     user_config: '',
     annotations: '',
+    launch_ticket: '',
     kms_urls: [],
     gateway_urls: [],
     stopped: false,
@@ -318,6 +321,7 @@ function createUpdateDialogState(): UpdateDialogState {
     updateNetworking: false,
     networks: [],
     user_config: '',
+    launch_ticket: '',
   };
 }
 
@@ -658,6 +662,7 @@ type CreateVmPayloadSource = {
     gateway_urls?: string[];
     stopped?: boolean;
     annotations?: Record<string, string>;
+    launch_ticket?: string;
   };
 
   function buildCreateVmPayload(source: CreateVmPayloadSource): VmmTypes.IVmConfiguration {
@@ -687,6 +692,7 @@ type CreateVmPayloadSource = {
       gateway_urls: source.gateway_urls?.filter((url) => url && url.trim().length) ?? [],
       stopped: !!source.stopped,
       annotations: source.annotations ?? {},
+      launch_ticket: source.launch_ticket?.trim() || undefined,
     };
   }
 
@@ -1202,6 +1208,7 @@ type CreateVmPayloadSource = {
       updateNetworking: false,
       networks: cloneNetworks(config),
       user_config: config.user_config || '',
+      launch_ticket: '',
     };
   }
 
@@ -1300,6 +1307,7 @@ type CreateVmPayloadSource = {
         gateway_urls: vmForm.value.gateway_urls,
         stopped: vmForm.value.stopped,
         annotations: parseAnnotations(vmForm.value.annotations),
+        launch_ticket: vmForm.value.launch_ticket,
       });
 
       await vmmRpc.createVm(payload);
@@ -1378,6 +1386,10 @@ type CreateVmPayloadSource = {
       body.compose_file = composeNeedsUpdate ? await makeUpdateComposeFile() : undefined;
       Object.assign(body, encryptedEnvPayload);
       body.user_config = updated.user_config;
+      // The VMM never returns the ticket, so only a new one is sent.
+      if (updated.launch_ticket.trim()) {
+        body.launch_ticket = updated.launch_ticket.trim();
+      }
       body.update_ports = true;
       body.ports = normalizePorts(updated.ports);
       body.gpus = updateDialog.value.updateGpuConfig ? configGpu(updated, true) : undefined;
@@ -1458,6 +1470,8 @@ type CreateVmPayloadSource = {
       simulated_tee: config.simulated_tee || '',
       user_config: config.user_config || '',
       annotations: annotationsText(config.annotations),
+      // A clone is a new deployment and needs its own ticket.
+      launch_ticket: '',
       stopped: !!config.stopped,
       event_log_version: theVm.appCompose?.event_log_version || 1,
     };