From c9a02959aa976c8e8e345b46d2a37e6a1f71ece9 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Wed, 8 Apr 2026 19:13:44 +0000 Subject: [PATCH] docs: add cloud VM caveats for mtools ESP packaging and uuid-runtime Co-authored-by: P4x-ng --- docs/AGENTS.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/AGENTS.md b/docs/AGENTS.md index 91d7b99..90e5ad7 100644 --- a/docs/AGENTS.md +++ b/docs/AGENTS.md @@ -29,3 +29,6 @@ The following system packages are required: `qemu-system-x86`, `ovmf`, `mtools`, - `pf` (the task runner) is NOT a pip package. It is cloned from `https://github.com/P4X-ng/pf-runner` and the `pf-cli-base/pf_parser.py` file is installed as `~/.local/bin/pf` with shebang `#!/usr/bin/env python3`. It requires `fabric` and `lark` pip packages. - `$HOME/.local/bin` must be on `PATH` for pip-installed scripts and the `pf` runner to work. - The cloud VM does not have `/dev/kvm`, so QEMU tests must omit `-enable-kvm` and `-cpu host`. +- The cloud VM kernel does not support `vfat` mounts, so `pf build-package-esp` and `pf test-qemu` fail out-of-the-box. Build the ESP image manually using `mtools` (`mmd`, `mcopy`) instead of `mount`. See the build steps used during initial setup for the exact recipe. +- `uuid-runtime` (provides `uuidgen`) must be installed for `pf secure-make-auth` to work. Add it alongside the other system packages listed above. +- The QEMU boot test passes when the `PhoenixGuard` string appears in `out/qemu/serial.log`. Attestation failures (`PG-ATTEST=FAIL`) are expected without SecureBoot enrollment.