ARM CCA and virtCCA support in CoCo

[huoqifeng]

This issue is created to track the work to support CCA and virtCCA in CoCo, include:

• Build CoCo operator arm64 image, which will be used to deploy CoCo in k8s. actions: enable arm64 images for operator operator#474
• Build CoCo trustee arm64 image, which will be used to deploy in k8s cluster and consumed by kata CI Push AS, RVPS, KBS and KBS Client for arm64 #639
• Build CoCo guest-components arm64 image, which will be consumed by kata-reply and kata CI ci: publish arm64 artifacts guest-components#844
• Build CoCo trustee operator arm64 image which will be used to deploy CoCo trustee in k8s actions: add arm64 image for release and PR merge trustee-operator#66
• CCA arm64 assets/payloads/images in Kata , related to https://linaro.atlassian.net/browse/DCAP-70, runtime-go | Kata-deploy: Add Arm CCA confidential Guest Support kata-containers/kata-containers#10664
• Add attester driver to support CCA AA: Update CcaAttester to use TSM Report ABI guest-components#595
• Add attester driver to support virtCCA
• e2e test in CoCo CI
• e2e test in Kata CI

CC @fitzthum @Xynnn007 @stevenhorsman and CC my friends in ARM @seungukshin (Seunguk Shin), Nick Connolly, Tao Xu and friends in Linaro @chendave @kevinzs2048 @thomas-fossati who have done many great work in this area already!

[Xynnn007]

btw CCA attester and verifier has already been supported somehow.
https://github.com/confidential-containers/trustee/tree/main/deps/verifier/src/cca
https://github.com/confidential-containers/guest-components/tree/main/attestation-agent/attester/src/cca

Is there any difference between the potential support?

[kevinzs2048]

Thanks @huoqifeng , I will also cc @thomas-fossati as he will upstream the trustee support for CCA quite soon.

[huoqifeng]

Thanks @huoqifeng , I will also cc @thomas-fossati as he will upstream the trustee support for CCA quite soon.

Thanks! @kevinzs2048 @thomas-fossati

[huoqifeng]

btw CCA attester and verifier has already been supported somehow. https://github.com/confidential-containers/trustee/tree/main/deps/verifier/src/cca https://github.com/confidential-containers/guest-components/tree/main/attestation-agent/attester/src/cca

Is there any difference between the potential support?

@Xynnn007 I think @kevinzs2048 and @thomas-fossati is still working on that.

[seungukshin]

Thank you for creating this issue @huoqifeng . I'm working to enable push AS / RVPS, KBS and KBS-client images for arm64.

[mythi]

@seungukshin note this comment related to #639. Would you be able to check the image builds using podman too?

[seungukshin]

@mythi sure, I'll test #684 with podman on arm and add a comment there.

[mythi]

@mythi sure, I'll test #684 with podman on arm and add a comment there.

thanks. The ask was to update Dockerfile arm support so that podman builds can also work

[seungukshin]

I created #689