enarx-archive / sev

Library for AMD SEV
Apache License 2.0
20 stars 15 forks source link

Add cooperative file locking for cached certificate chain #10

Closed connorkuehl closed 4 years ago

connorkuehl commented 4 years ago

A more loquacious explanation is in the commit log.

FYI: requires a git dependency on this: https://github.com/connorkuehl/sev-cache

If this is a viable solution I'd like to move this repo to the enarx org.

haraldh commented 4 years ago

Do you need to sync with time consistency? Otherwise I find rename atomically enough.

haraldh commented 4 years ago

Or can we just make this a system requirement like /etc/hostname or hardware specific machine requirement. So /etc/sev-cert-chain or something

connorkuehl commented 4 years ago

Implementing a solution that doesn't require file locking.