Skip to content

Update QOS version to v2026.6.11 #409

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
prasanna-anchorage wants to merge 1 commit into from
Closed

Update QOS version to v2026.6.11 #409

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions docs/wallet-integration/hosted/getting-started.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ See [Attestation Verification](../self-hosted-tee/attestation) for implementatio

## PCR allowlist values

The PCRs are determined by the qos enclave runtime version Turnkey has deployed (currently TVC `v2026.2.6`, qos commit [`d866f2c6cbc58cc08c24eab4828f0824ad16a226`](https://github.com/tkhq/qos/commit/d866f2c6cbc58cc08c24eab4828f0824ad16a226)). You can reproduce them locally from that qos rev — never trust an externally supplied PCR file without verifying it.
The PCRs are determined by the qos enclave runtime version Turnkey has deployed (currently TVC `v2026.6.11`, qos commit [`<commit TODO>`](https://github.com/tkhq/qos/commit/<commit TODO>)). You can reproduce them locally from that qos rev — never trust an externally supplied PCR file without verifying it.

### Generating PCRs from source

Expand All @@ -52,7 +52,7 @@ The `scripts/extract-nitro-pcrs.sh` tool in this repo clones tkhq/qos at the dep
The deployment rev lives in a marker comment in `src/Cargo.toml`:

```toml
# qos-deployment-rev = d866f2c6cbc58cc08c24eab4828f0824ad16a226
# qos-deployment-rev = <commit TODO>
```

This is distinct from the `rev = "..."` on each `qos_*` crate in the same file, which pins the qos library code that `parser_app` compiles against and does not affect PCRs. To audit a prospective deployment bump before updating the marker, pass `--rev` explicitly:
Expand Down
4 changes: 2 additions & 2 deletions tools/tvc-deploy/src/main.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ const SETLIVE_TIMEOUT: Duration = Duration::from_secs(300);
const USAGE: &str = "usage:\n \
tvc-deploy gen-operator-key --out <path>\n \
tvc-deploy deploy --app-id <id> --image-url <url> --expected-digest <hex> --operator-id <id> \
[--operator-seed <path>] [--qos-version v2026.2.6] [--host-ip 0.0.0.0] [--host-port 3000]\n \
[--operator-seed <path>] [--qos-version v2026.6.11] [--host-ip 0.0.0.0] [--host-port 3000]\n \
(operator seed may instead come from env TVC_CI_OPERATOR_SEED, or be omitted \
to approve with the logged-in org operator key)";

Expand Down Expand Up @@ -128,7 +128,7 @@ fn deploy(sh: &Shell, flags: &HashMap<String, String>) -> Result<()> {
let qos = flags
.get("qos-version")
.map(String::as_str)
.unwrap_or("v2026.2.6");
.unwrap_or("v2026.6.11");
let host_ip = flags
.get("host-ip")
.map(String::as_str)
Expand Down
Loading