Meeting 09/10/19

[lukehinds]

Project Board

https://github.com/orgs/keylime/projects/1

Attendees

• @lukehinds (Luke Hinds)
• @jetwhiz (Charlie)
• @leonjia0112 (Leo Jia)
• @nabilschear (Nabil Schear)
• @mbestavros (Mark Bestavros)
• @atothRedHat (Andrew Toth)
• @axelsimon (Axel Simon)
• @ozoder (Ondřej Zoder)
• @amylily1011 (Bhinyaporn Pattanasethanon) (Amy)
• @mrcbd (Marco)

Topics

Fedora packaging:

copr

https://copr.fedorainfracloud.org/coprs/lhinds/Keylime/

dnf copr enable lhinds/Keylime
dnf install keylime

bugzilla :

https://bugzilla.redhat.com/show_bug.cgi?id=1759276

tools-versions:

• Track upstream tpm2-tools versions and handling keylime#187
• https://github.com/keylime/keylime/pull/188/files#diff-b3a747856d4ab9c1e888fec1b9132f0fR105

f-strings

• Set all string declarations using f-strings keylime#141 @amylily1011

Documentation help:

• @atothRedHat @axelsimon
• Three Part Key Derivation: Three Part Key Derivation keylime-docs#33
• Introduce documentation on trusted payloads Introduce documentation on trusted payloads keylime-docs#41
• Trusted Boot: Trusted boot keylime-docs#32
• Secure payloads Introduce documentation on trusted payloads keylime-docs#41
• System hardening: System hardening keylime-docs#31

vTPM port

• Add vTPM support for TPM 2.0 (with KVM/QEMU) keylime#29 @nabilschear @lukehinds @ozoder @cjustacoder

Need Help!

• Validate against CoreOS: Validate against Fedora CoreOS keylime#140
• Separate out CFSSL: Seperate out CFSSL server components from cf_impl_cfssl keylime#145
• Shell exec hardening: Investigate removal of shell=True calls keylime#131
• Configurable Databases: Configurable database selection using ORM keylime#130
• Ansible integration: Ansible Integration keylime#129

Parked

• TPM 2.0 port
  ** Add tpm2 version 2 support rust-keylime#75

Implement rhboot

keylime/keylime#63 @lukehinds