-
Notifications
You must be signed in to change notification settings - Fork 315
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Cryptography documentation added. #629
Conversation
By analyzing the blame information on this pull request, we identified @cwebberOps and @ryankeairns to be potential reviewers |
Copy looks good to me. Ready for @metadave sign off on the tech review. |
|
||
Origin key cryptography is asymmetric; it has a public key that you can distribute freely, and a private key that you should keep safe. | ||
|
||
Supervisors, by default, will refuse to run packages for which they do not have the public key. They use this public key to verify the integrity of the Habitat package they download, before running it. Supervisors can be provided the public key by pointing them at a depot that has it, or by putting the key on disk outside of Habitat. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
"...or by putting the key on disk outside of Habitat." => do we want to call out /hab/cache/keys
and HAB_CACHE_KEY_PATH
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Since this is a concepts document I'm leaving out the specifics; when we write the "jobs"-oriented documents we can put it in there.
looks good |
📌 Commit e38cb53 has been approved by |
Pull request: #629 Approved by: davidwrede
Pull request: #629 Approved by: davidwrede
Pull request: #629 Approved by: davidwrede
☀️ Test successful - travis |
Pull request: #629 Approved by: davidwrede
Pull request: #629 Approved by: davidwrede
Pull request: #629 Approved by: davidwrede
RFR @metadave @davidwrede