Add CvmImageBuilder - Confidential Virtual Machine vhdx build script

ConfidentialComputing/CvmImageBuilder/.dockerignore

@@ -0,0 +1,12 @@
+build/
+rootfs/
+*.vhdx
+*.raw
+*.img
+*.squashfs
+*.hash
+*.log
+.git/
+.gitignore
+README.md
+*.md

ConfidentialComputing/CvmImageBuilder/Dockerfile

@@ -0,0 +1,60 @@
+#
+# Copyright (c) Microsoft Corporation. All rights reserved.
+#
+# Description:
+# Dockerfile to build an environment for creating integrity-protected VHDX images
+#
+# DisableDockerDetector "This Dockerfile creates CVM images for testing purposes and is not used in production."
+FROM ubuntu:24.04
+
+# Set environment variables
+ENV DEBIAN_FRONTEND=noninteractive
+ENV TZ=UTC
+
+# Install all build dependencies
+RUN apt-get update && apt-get install -y \
+    qemu-utils \
+    dracut \
+    systemd-boot-efi \
+    systemd-ukify \
+    libsquashfs-dev \
+    cryptsetup-bin \
+    squashfs-tools \
+    debootstrap \
+    openssh-server \
+    rsync \
+    bc \
+    curl \
+    gnupg \
+    ca-certificates \
+    apt-transport-https \
+    lsb-release \
+    sudo \
+    parted \
+    util-linux \
+    kmod \
+    udev \
+    dosfstools \
+    systemd \
+    python3 \
+    binutils \
+    vim-common \
+    osslsigncode \
+    && rm -rf /var/lib/apt/lists/*
+
+# Create a working directory
+WORKDIR /workspace
+
+# Copy the build scripts
+COPY build-cvm-image.sh .
+COPY scripts/ scripts/
+
+# Make scripts executable
+RUN chmod +x build-cvm-image.sh
+RUN chmod +x scripts/*.sh
+
+# Create build output directories
+RUN mkdir -p /workspace/build /workspace/out
+
+# Set the entrypoint to our build script
+ENTRYPOINT ["./build-cvm-image.sh"]