Meeting 09/10/19

[lukehinds]

Project Board

https://github.com/orgs/keylime/projects/1

Attendees

• [x] @lukehinds (Luke Hinds)
• [x] @jetwhiz (Charlie)
• [ ] @leonjia0112 (Leo Jia)
• [ ] @nabilschear (Nabil Schear)
• [ ] @mbestavros (Mark Bestavros)
• [x] @atothRedHat (Andrew Toth)
• [ ] @axelsimon (Axel Simon)
• [ ] @ozoder (Ondřej Zoder)
• [x] @amylily1011 (Bhinyaporn Pattanasethanon) (Amy)
• [ ] @mrcbd (Marco)

Topics

Fedora packaging:

copr

https://copr.fedorainfracloud.org/coprs/lhinds/Keylime/

dnf copr enable lhinds/Keylime dnf install keylime

bugzilla :

https://bugzilla.redhat.com/show_bug.cgi?id=1759276

tools-versions:

• https://github.com/keylime/keylime/issues/187
  • https://github.com/keylime/keylime/pull/188/files#diff-b3a747856d4ab9c1e888fec1b9132f0fR105

f-strings

• keylime/keylime#141 @amylily1011

Documentation help:

• @atothRedHat @axelsimon
• Three Part Key Derivation: https://github.com/keylime/keylime-docs/issues/33
• Introduce documentation on trusted payloads https://github.com/keylime/keylime-docs/pull/41
• Trusted Boot: https://github.com/keylime/keylime-docs/issues/32
• Secure payloads keylime/keylime-docs#41
• System hardening: https://github.com/keylime/keylime-docs/issues/31

vTPM port

• keylime/keylime#29 @nabilschear @lukehinds @ozoder @cjustacoder

Need Help!

• Validate against CoreOS: https://github.com/keylime/keylime/issues/140
• Separate out CFSSL: https://github.com/keylime/keylime/issues/145
• Shell exec hardening: https://github.com/keylime/keylime/issues/131
• Configurable Databases: https://github.com/keylime/keylime/issues/130
• Ansible integration: https://github.com/keylime/keylime/issues/129

Parked

• TPM 2.0 port ** keylime/rust-keylime#75

Implement rhboot

keylime/keylime#63 @lukehinds