Skip to content

README.md

Latest commit

 

History

History
79 lines (58 loc) · 2.98 KB

README.md

File metadata and controls

79 lines (58 loc) · 2.98 KB
Raw

Prism Node

Validate OpenSSF Scorecard License

prismd is the supplier-side daemon for Prism Network. It enrolls a GPU host, publishes signed inventory and telemetry, receives lease commands and creates isolated Kata workloads with exclusive VFIO device assignment.

Status

This project is pre-production. Its unit tests and simulated image checks run in public CI, but public CI does not exercise a physical NVIDIA GPU, IOMMU, VFIO, Kata Containers or the production control plane. A passing build is not evidence that a host is safe for paid workloads.

Capabilities

  • Host preflight for Ubuntu, NVIDIA, containerd, Kata, IOMMU, VFIO and nftables prerequisites.
  • Ed25519 device identity, signed enrollment and sequenced telemetry.
  • Short-lived mutual-TLS node certificates.
  • Outbound-only SSH and Jupyter tunnel registration.
  • Signed command polling and idempotent command reporting.
  • Public OCI image validation and digest pinning.
  • Exclusive VFIO reservation, Kata launch plans, egress policy and teardown.
  • Encrypted ephemeral workspace setup and crash-recovery state.

Requirements

The initial hardware target is Ubuntu 24.04 on x86-64 with an NVIDIA GPU in a complete, isolated IOMMU group. A production host also needs:

  • NVIDIA drivers and NVIDIA Container Toolkit.
  • containerd, nerdctl and a configured Kata runtime.
  • IOMMU and vfio-pci.
  • nftables.
  • Swap disabled.

Read the hardware contract before changing a host. VFIO binding can remove its display adapter from the host and a bad IOMMU topology cannot be corrected in software.

Build

The repository pins its Rust toolchain and protocol release.

cargo build --release --locked
./target/release/prismd preflight

Install the binary and systemd units by following deploy/systemd/README.md. Enrollment and funded network participation require external Prism Network services and credentials; they are not bundled here.

Development

./scripts/validate.sh

The validation gate formats, lints, tests, documents, audits and builds a release binary. Hardware integration is a separate release gate documented in docs/VALIDATION.md.

Security

Running prismd grants a small, security-critical component control over VFIO, containerd and host firewall rules. Do not run arbitrary forks on a supplier host. Read SECURITY.md before installing or contributing.

License

Code and documentation are licensed under the Apache License 2.0. The Prism Network name and visual identity are governed separately.