constellation/state
Otto Bittner 405db3286e AB#2386: TrustedLaunch support for azure attestation
* There are now two attestation packages on azure.
The issuer on the server side is created base on successfully
querying the idkeydigest from the TPM. Fallback on err: Trusted Launch.
* The bootstrapper's issuer choice is validated by the CLI's validator,
which is created based on the local config.
* Add "azureCVM" field to new "internal-config" cm.
This field is populated by the bootstrapper.
* Group attestation OIDs by CSP (#42)
* Bootstrapper now uses IssuerWrapper type to pass
the issuer (and some context info) to the initserver.
* Introduce VMType package akin to cloudprovider. Used by
IssuerWrapper.
* Extend unittests.
* Remove CSP specific attestation integration tests

Co-authored-by: <dw@edgeless.systems>
Signed-off-by: Otto Bittner <cobittner@posteo.net>
2022-09-05 12:03:48 +02:00
..
cmd AB#2386: TrustedLaunch support for azure attestation 2022-09-05 12:03:48 +02:00
internal add license headers 2022-09-05 09:17:25 +02:00
keyproto Enable integrity protection on boot (#300) 2022-08-02 12:35:23 +02:00
README.md Fix stateservice test and increase speed 2022-07-27 15:07:53 +02:00

State

Files and source code for mounting persistent state disks

Testing

Integration test is available in state/test/integration_test.go. The integration test requires root privileges since it uses dm-crypt. Build and run the test:

go test -c -tags=integration ./state/test/
sudo ./test.test