Meeting 16/10/19

[lukehinds]

Project Board

https://github.com/orgs/keylime/projects/1

Attendees

• @lukehinds (Luke Hinds)
• @jetwhiz (Charlie)
• @leonjia0112 (Leo Jia)
• @nabilschear (Nabil Schear)
• @mbestavros (Mark Bestavros)
• @atothRedHat (Andrew Toth)
• @axelsimon (Axel Simon)
• @ozoder (Ondřej Zoder)
• @amylily1011 (Bhinyaporn Pattanasethanon) (Amy)
• @mrcbd (Marco)

Topics

Fedora packaging:

copr

https://copr.fedorainfracloud.org/coprs/lhinds/Keylime/

dnf copr enable lhinds/Keylime
dnf install keylime

bugzilla :

https://bugzilla.redhat.com/show_bug.cgi?id=1759276

tools-versions:

• [WIP] new tools selection code keylime#188
• Track upstream tpm2-tools versions and handling keylime#187

f-strings

• Set all string declarations using f-strings keylime#141 @amylily1011

HW tpm support yaml formatting

• yaml.scanner issue when running keylime_agent  keylime#160

Keylime Raspberry Pi

• Keylime Raspbian Support keylime#190

Rust Agent

• config parser Implements Config Parser rust-keylime#77
• working on hooking code together.

Documentation help:

• @atothRedHat @axelsimon
• Three Part Key Derivation: Three Part Key Derivation keylime-docs#33
• Introduce documentation on trusted payloads Introduce documentation on trusted payloads keylime-docs#41
• Trusted Boot: Trusted boot keylime-docs#32
• Secure payloads Introduce documentation on trusted payloads keylime-docs#41
• System hardening: System hardening keylime-docs#31

vTPM port

• Add vTPM support for TPM 2.0 (with KVM/QEMU) keylime#29 @nabilschear @lukehinds @ozoder @cjustacoder

Need Help!

• Validate against CoreOS: Validate against Fedora CoreOS keylime#140
• Separate out CFSSL: Seperate out CFSSL server components from cf_impl_cfssl keylime#145
• Shell exec hardening: Investigate removal of shell=True calls keylime#131
• Configurable Databases: Configurable database selection using ORM keylime#130
• Ansible integration: Ansible Integration keylime#129

Parked

• TPM 2.0 port
  ** Add tpm2 version 2 support rust-keylime#75

Implement rhboot

keylime/keylime#63 @lukehinds