OndrejHome / fast-vm

'fast-vm' is a script for defining VMs from images provided in thin LVM pool.
GNU General Public License v3.0
22 stars 14 forks source link

signing&verifying of image/hack/xml files #17

Closed OndrejHome closed 4 years ago

OndrejHome commented 7 years ago

As the images and definition files can get corrupted (or tampered with) during transfer, the fast-vm should support some signing and verifying mechanism to detect this and warn user about this. Questions:

OndrejHome commented 4 years ago

currently present in develop is code that will deal with image checksum creation and verification import and on-demand. Checksums are not implemented for hack files and xml files at the moment and may arrive in later version of fast-vm. Image integrity verification will allow to tell if part of image differs from checksums with granularity of 1GB - each 1GB of image has a separate checksum. Feature is introduced in commit https://github.com/OndrejHome/fast-vm/commit/cdb9eea9c72723731167f19ef66a5978957a1a72

OndrejHome commented 4 years ago

This is now part of fast-vm 1.7 closing this issue. XML file/hack file signing might be handled separately in future releases.