codenotary / immudb

immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history
https://immudb.io
Other
8.52k stars 337 forks source link

Hardening immudb installation and files #126

Open vchain-us-mgmt opened 4 years ago

vchain-us-mgmt commented 4 years ago

Create guidelines on how to harden the installation of immudb and protect its files, for different OSes

zaza81 commented 2 years ago

@byo do you think this is still valid?

byo commented 2 years ago

@zaza81 Yes, I think we should still improve our documentation regarding that.

Currently the quick-start and installation guide do not require validation of downloaded binaries, neither with sha256 checksum validation nor with vcn authentication.

We could also create some guidelines on how to setup a kubernetes deployment with read-only-root-fs and minimal permissions.