anjuna-gcp-cli disk pcr

anjuna-gcp-cli disk pcr

Calculates the expected PCR values for a disk image.

This command displays the expected Platform Configuration Register (PCR) values. The PCR values are an essential data in an attestation report. It provides a cryptographic measurement of code and data used for booting the Anjuna Confidential Container, and of the signing key if the image was signed.

When an Anjuna Confidential Container is started with the Anjuna CLI, the PCR values will be shown in the boot log. To verify that the expected software is running, you must confirm that the boot log’s PCR values are the same as the PCR values shown in anjuna-gcp-cli disk pcr. This can be automated using the Anjuna Policy Manager.

Options

Usage

anjuna-gcp-cli disk pcr [OPTIONS...]

--disk

The name of the disk file to use (default: disk.raw)

Global options

The following options are available for all anjuna-gcp-cli subcommands.

Global options

-h, --help

Prints the help information for the command

--debug

Prints debug messaging

-v, --version

Prints the anjuna-gcp-cli version

Exit status

  • 0 on success

  • 1 on error

Example

$ anjuna-gcp-cli disk pcr --disk my-disk.raw