Meeting 30/10/19

[atothRedHat]

Project Board

https://github.com/orgs/keylime/projects/1

Attendees

• [ ] @lukehinds (Luke Hinds)
• [ ] @frozencemetery (Robbie Harwood)
• [ ] @jetwhiz (Charlie)
• [ ] @leonjia0112 (Leo Jia)
• [ ] @nabilschear (Nabil Schear)
• [ ] @mbestavros (Mark Bestavros)
• [ ] @atothRedHat (Andrew Toth)
• [ ] @axelsimon (Axel Simon)
• [ ] @ozoder (Ondřej Zoder)
• [ ] @amylily1011 (Bhinyaporn Pattanasethanon) (Amy)
• [ ] @mrcbd (Marco)

Topics

enable provider verifier to run on the same machine as a tenant verifier

keylime/keylime#194

Fedora packaging:

copr

https://copr.fedorainfracloud.org/coprs/lhinds/Keylime/

dnf copr enable lhinds/Keylime dnf install keylime

bugzilla :

https://bugzilla.redhat.com/show_bug.cgi?id=1759276

Keylime Raspberry Pi

keylime/keylime#190

invoke_get_quote fails on tornado 6.0

keylime/keylime#196

f-strings

keylime/keylime#141 @amylily1011

HW tpm support yaml formatting

keylime/keylime#160

Keylime Raspberry Pi

keylime/keylime#190

Rust Agent

config parser keylime/rust-keylime#77
working on hooking code together.

Documentation help:

@atothRedHat @axelsimon
Three Part Key Derivation: keylime/keylime-docs#33
Introduce documentation on trusted payloads keylime/keylime-docs#41
Trusted Boot: keylime/keylime-docs#32
Secure payloads keylime/keylime-docs#41
System hardening: keylime/keylime-docs#31

vTPM port

keylime/keylime#29 @nabilschear @lukehinds @ozoder @cjustacoder

Need Help!

Validate against CoreOS: keylime/keylime#140
Separate out CFSSL: keylime/keylime#145
Shell exec hardening: keylime/keylime#131
Configurable Databases: keylime/keylime#130
Ansible integration: keylime/keylime#129

Parked

TPM 2.0 port
** keylime/rust-keylime#75

Implement rhboot

keylime/keylime#63 @lukehinds