CVM keeps exiting and booting when started from the Dstack dashboard

[youben11]

I tried following the instructions in the README but can't get a working CVM from the Dstack dashboard. My understanding is that I don't really need a KMS+Gateway in a simple dev environment. Specially because I would need to setup a domain AFAICT. If this isn't supposed to work without a KMS+Gateway, then please let me know if there is any docs on how this domains are used so that I can do some setup locally that could work.

Current config

• Ubuntu 24.04.3 LTS
• INTEL(R) XEON(R) GOLD 5515+ / 256G of RAM
• TDX is enabled in the BIOS, and I ran a CVM following canonical/tdx

To reproduce

• clone the repo (v0.5.3)
• run the following from dtack repo

  mkdir build
  cd build
  ../build.sh hostcfg
  ../build.sh hostcfg
  ../build.sh dl 0.5.3

• changed address and cvm.port_mapping.address to 0.0.0.0 (this is a dev server) and ran ./dstack-vmm -c vmm.toml
• On the website, I deployed a new cvm (didn't change much of the default) with

  version: '3.8'
  services:
    nginx:
      image: nginx:latest
      ports:
        - "8080:80"
      restart: always

(Note the "Compose Hash: 0xError calculating hash" error message)

Then the CVM keeps going from the booting to exited status and back to booting

I see this error in the logs:

[    2.026193] dstack-prepare.sh[229]: Syncing system time...
[    2.037770] dstack-prepare.sh[245]: 200 OK
[    2.042779] dstack-prepare.sh[229]: Preparing dstack system...
[    2.158823] dstack-prepare.sh[247]: 2025-09-15T09:33:29.127568Z  INFO cmd_lib::builtins: Mounting host-shared
[    2.167417] dstack-prepare.sh[247]: 2025-09-15T09:33:29.135874Z  INFO cmd_lib::builtins: Copying host-shared files
[    2.185335] dstack-prepare.sh[247]: 2025-09-15T09:33:29.154273Z  INFO cmd_lib::builtins: Unmounting host-shared
[    2.204061] dstack-prepare.sh[247]: 2025-09-15T09:33:29.172948Z  INFO dstack_util::system_setup: System time will be synchronized by chronyd in background
[    2.215256] dstack-prepare.sh[247]: 2025-09-15T09:33:29.183570Z  INFO dstack_util::system_setup: No key provider is enabled, generating temporary app keys
[    2.243090] dstack-prepare.sh[247]: Error: Failed to generate app keys
[FAILED] Failed to start DStack Guest Preparation Service.
[    2.247257] dstack-prepare.sh[247]: Caused by:
See 'systemctl status dstack-prepare.service' for details.
[    2.250387] dstack-prepare.sh[247]:     0: Failed to get quote

And this single line in the stderr

qemu-system-x86_64: cpus are not resettable, terminating

[kvinwang]

dstack cvm need to get tdx quote during the boot. Could confirm you have properly setup the qgs service according the README from canonical/tdx?
If you setup the qgs, could paste the logs from the qgsd.service?

[youben11]

I actually haven't setup qgs. I will do that and update with the result here.

[youben11]

I now did the QGSD setup but it's the same. I keep getting this in the QGSD logs:

Sep 16 08:18:48 tdx-host qgsd[1757]: Added a new connection, now [1]
Sep 16 08:18:48 tdx-host qgsd[1757]: handle_read: status [system:0]
Sep 16 08:18:48 tdx-host qgsd[1757]: handle_read:[system:0Received 1052 bytes.]
Sep 16 08:18:48 tdx-host qgsd[1757]: process legecy request [1052] bytes!.
Sep 16 08:18:48 tdx-host qgsd[1757]: unpack message successfully in thread [7025ff4de740]
Sep 16 08:18:48 tdx-host qgsd[1757]: tee_att_get_quote_size return 0x1100f
Sep 16 08:18:48 tdx-host qgsd[1757]: call tee_att_init_quote
Sep 16 08:18:48 tdx-host qgsd[1757]: [QPL] No certificate data for this platform.
Sep 16 08:18:48 tdx-host qgsd[1757]: [get_platform_quote_cert_data ../td_ql_logic.cpp:302] Error returned from the p_sgx_get_quote_config API. 0xe011
Sep 16 08:18:48 tdx-host qgsd[1757]: tee_att_init_quote return 0x11001
Sep 16 08:18:48 tdx-host qgsd[1757]: tee_att_get_quote_size return 0x1100f
Sep 16 08:18:48 tdx-host qgsd[1757]: Return from get_resp
Sep 16 08:18:48 tdx-host qgsd[1757]: About to write response in thread [7025fd5fc6c0]
Sep 16 08:18:48 tdx-host qgsd[1757]: About to shutdown and close socket
Sep 16 08:18:48 tdx-host qgsd[1757]: erased a connection, now [0]

To note that I didn't reconfigure Dstack after the QGSD setup.

[kvinwang]

No need to reconfigure dstack. The log indicates an issue within qgs/pccs, or the multi-package platform lacks proper registration.

[youben11]

Should the QGS service be accessible publicly?