Meeting 22/01/20

[lukehinds]

Project Board

https://github.com/orgs/keylime/projects/1

Attendees

• [x] @lukehinds (Luke Hinds)
• [ ] @jetwhiz (Charlie)
• [x] @nabilschear (Nabil Schear)
• [x] @atothRedHat (Andrew Toth)
• [x] @axelsimon (Axel Simon)
• [x] @amylily1011 (Amy)

Topics

vTPM project

prototype is complete:

• https://www.youtube.com/watch?v=idVgJATigfg

• https://github.com/BU-NU-CLOUD-F19/Keylime-_Enabling_Trust_in_the_Cloud_QEMU-KVM/blob/master/README.md

Keylime Raspberry Pi

keylime/keylime#190

UI Work

@amylily1011

https://docs.google.com/document/d/1Sa8ErJwrg8IRD0dMe4VPdHSNmMMt4XFBxt9ixnMsnSQ/edit

Keylime Auth

https://docs.google.com/document/d/17_4aRxpnLRVJ0P0_bjptujklrL2mr5-gXScSRKF9yKw/edit#

OpenStack

https://github.com/keylime/keylime/issues/248 @Epiphyll

Documentation help:

@atothRedHat @axelsimon Three Part Key Derivation: keylime/keylime-docs#33 Introduce documentation on trusted payloads keylime/keylime-docs#41 Trusted Boot: keylime/keylime-docs#32 Secure payloads keylime/keylime-docs#41 System hardening: keylime/keylime-docs#31

Need Help!

Validate against CoreOS: keylime/keylime#140 Separate out CFSSL: keylime/keylime#145 Shell exec hardening: keylime/keylime#131 Configurable Databases: keylime/keylime#130 Ansible integration: keylime/keylime#129

Parked

TPM 2.0 port

• keylime/rust-keylime#75

Rust port