-
Notifications
You must be signed in to change notification settings - Fork 58
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Small fixes relating to Keylime components working together #165
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good so far. Let us know if you wish to add those extra commits referenced or if you'd prefer to put them through in a different PR!
@ashcrow I think I'd actually like to merge it and add more in a bit. It would help with keeping track of branches while I test some things. |
src/secure_mount.rs
Outdated
Error::SecureMount( | ||
format!( | ||
"unable to change secure path dir owner to root: received exit code {}", | ||
e.code().unwrap().unwrap() //#[allow_ci] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Generally we want to avoid unwrap
but there may be cases where it's fine. It may be worth noting in a comment why it's in use in these cases.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Completely agree. I don't think it can be avoided here, as they are Option
types (but if you know a way, let me know). I added comments as suggested.
42982bf
to
75b516f
Compare
@ashcrow Sorry to push a new version after you approved! I took your point about the |
Signed-off-by: Lily Sturmann <[email protected]>
aa32e03
to
5931d28
Compare
Signed-off-by: Lily Sturmann <[email protected]>
Signed-off-by: Lily Sturmann <[email protected]>
Signed-off-by: Lily Sturmann <[email protected]>
Merging this, as it had gotten two approvals, passed CI, and the update I pushed was just a comment. |
These all relate to running the
keylime_agent
,keylime-verifier
, andkeylime-registrar
withdocker-compose
, but some of the fixes are also generally applicable. Backstory: I am trying to make sure the components can work together before writing the 3-party key protocol. These are changes I made while fixing some bugs or trying to understand them.I am still debugging some errors, so there are probably a few more commits to be added. EDIT: But these could go in an immediate future PR as well.Currently:
ERROR keylime_agent::revocation > Path for the 0mq socket: /tmp/secure/unzipped/RevocationNotifier-cert.crt doesn't exist