sp-nvtrust-wrapper

A Node.js wrapper for the nvtrust library, designed to enable attestation for NVIDIA Confidential Computing.

📦 Build Instructions

The package supports CPython 3.11 and 3.12 on Linux amd64 with glibc 2.28 or newer. Other Python versions, operating systems, architectures, and musl-based distributions such as Alpine Linux are not supported by postinstall.

To build the project, run:

npm install
npm run postinstall
npm run build

postinstall selects the lock file for the active Python minor version and installs only the exact wheel and SHA-256 hash recorded for every direct and transitive dependency.

Updating Python dependencies

Edit the direct dependencies in py/requirements.in, then regenerate both locks in the manylinux 2.28 image:

docker run --rm --platform linux/amd64 --user "$(id -u):$(id -g)" --env HOME=/tmp \
  -v "$PWD:/work" -w /work \
  quay.io/pypa/manylinux_2_28_x86_64 \
  /opt/python/cp311-cp311/bin/python tools/generate_python_lock.py

docker run --rm --platform linux/amd64 --user "$(id -u):$(id -g)" --env HOME=/tmp \
  -v "$PWD:/work" -w /work \
  quay.io/pypa/manylinux_2_28_x86_64 \
  /opt/python/cp312-cp312/bin/python tools/generate_python_lock.py

Validate the generated files before committing them:

python3 tools/verify_python_locks.py