First draft of document on the new "measured boot log feature".

keylime / keylime-docs

Keylime Documentary Repository

https://keylime-docs.readthedocs.io/en/latest/

Apache License 2.0

3 stars 16 forks source link

First draft of document on the new "measured boot log feature". #62

Closed maugustosilva closed 2 years ago

maugustosilva commented 3 years ago

Signed-off-by: Marcio Silva marcios@us.ibm.com

mpeters commented 3 years ago

This is a good start. Although more example policies would definitely be needed.

aplanas commented 2 years ago

Seems that there are missing bits here:

The format of the mb_refstate is not explained
There is not example about how to create a minimal viable policy
IIUC the code, there is no transformation of the JSON refstate into a test
There is no indication about how this policy can be loaded (via the measured_boot_imports parameter in cloud_verifier section)

(Edit: the code for test.py is beautiful, btw)

THS-on commented 2 years ago

@maugustosilva now that the Example policy exists should we just reference that in the documentation for now and merge this PR as initial documentation of that feature?

mpeters commented 2 years ago

I agree, this is now more complete with the other example, so I'm ready to merge if @maugustosilva is.