ci: add real-hardware Azure TiP validation - #212
Draft
Haitao Huang (haitaohuang) wants to merge 1 commit into
Draft
Haitao Huang (haitaohuang) wants to merge 1 commit into
Haitao Huang (haitaohuang) wants to merge 1 commit into
Conversation
Add a GitHub Actions workflow and PowerShell/Bash TiP harness scripts for PR-gate real-hardware acceptance testing on Azure TDX machines. The harness collects TiP evidence logs, enforces fail-closed cleanup on error, and exposes reusable helpers so individual test scripts can share consistent setup and teardown logic. Assisted-by: Squad Coordinator:GPT-5.6 Sol Signed-off-by: Haitao Huang <haitaohuang@microsoft.com>
Haitao Huang (haitaohuang)
marked this pull request as draft
July 27, 2026 21:43
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds a PR-gate CI workflow and Azure TiP (Test in Production) harness for real-hardware TDX acceptance testing on Microsoft Azure machines.
What is added
| File | Purpose |
|------|---------||
|
.github/workflows/pr-azure-tip.yml| GitHub Actions workflow that gates PRs on TiP hardware ||
sh_script/Azure/tip/Invoke-TipHarness.ps1| Main orchestration harness with fail-closed cleanup ||
sh_script/Azure/tip/TipHarness.Common.ps1| Shared helpers for consistent setup/teardown across test scripts ||
sh_script/Azure/tip/Invoke-TdxLmLoopback.ps1| TDX live-migration loopback test (updated for harness API) ||
sh_script/Azure/tip/Run-TipTests.ps1| Top-level test runner (updated for harness API) ||
sh_script/Azure/tip/Test-TdxLmRebind.ps1| TDX rebind test (updated for harness API) ||
sh_script/Azure/tip/Test-TdxServTdExtPrebind.ps1| ServTD ext-prebind test (minor harness alignment) ||
sh_script/Azure/tip/build_tip_package.sh| Build script for the TiP test package ||
sh_script/Azure/tip/README.md| Updated documentation for the harness |Validation
bash -n build_tip_package.sh— PASSyaml.safe_loadon workflow — PASSgit diff --check: no whitespace errors — PASSpwshnot available in CI host)Hardware Prerequisites
[self-hosted, tdx-tip]tip-approvedlabel on the PR before any hardware job dispatchestip-hardware-gateenvironment is protected; environment-level approval is required before runners executeAZURE_TIP_*) must be pre-configured in thetip-hardware-gateenvironment