search

nsacyber / HIRS

Trusted Computing based services supporting TPM provisioning and supply chain validation concepts. #nsacyber
Other
177 stars 57 forks source link

HIRS_Provisioner dependencies #149

Closed m-morrone closed 5 years ago

m-morrone commented 5 years ago

There is some variance between the dependencies for the HIRS Provisioners specified on the Wiki and what is listed in the rpms.

For TPM1.2 gcc, TrouSerS, and tpm-tools are only specified on the Wiki. Additionally, bash and systemd (el7 only) are dependencies for the rpm but not on Wiki.

For TPM2.0, Java, gcc, and libcurl Developer Libraries are only specified on the Wiki. The rpm requires bash, glibc, libcurl, libgcc, libttdc++, and tpm2-abrmd.

Could gcc, trousers, and tpm-tools be added as dependencies for HIRS_Provisioner_TPM_1_2 and java and gcc be added as dependencies for HIRS_Provisioner_TPM_2_0? Also I believe lib-curl-devel is not required but lib-curl required by the rpm is.

apldev3 commented 5 years ago

For the 1.2 Provisioner, trousers and tpm-tools are dependencies of tpm_module which is the real dependency of the 1.2 Provisioner that needs those to be present. If you install tpm_module then both of those get installed. As for gcc, I think that is only necessary if you're compiling/building the tpm_module or 2.0 Provisioner, so I'll go ahead and remove that from the install guide.

apldev3 commented 5 years ago

Also for the 2.0 Provisioner, Java and gcc should again only be required for building/packaging and not actually running. Will remove from the install guide as well. As far as libcurl, I've already fixed that to be libcurl and not libcurl-devel. Thanks for catching that!

apldev3 commented 5 years ago

Alrighty, I believe the updates have been made. I've also included some direction for the tpm2-abrmd dependency or pointed people to the right location on the wiki if they need to build a newer version of that dependency from source.

Unfortunately, that cannot be made a dependency of the RPM as older versions of tpm2-tools don't require it and instead require resourcemgr which is automatically packaged with earlier versions of tpm2-tss.

@m-morrone if you have any additional suggestions feel free to reopen the ticket or make a new one.

Appreciate the help refining our documentation!