Add platform confidential directory on Settings

[nesitor]

Problem: The server doesn't have a directory to save the platform certificates generated by sevctl.

Solution: Set that directory field on settings class and ensure to create the folder on initialization step.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 57.95%. Comparing base (cc3f292) to head (ff5d87b).
Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #618      +/-   ##
==========================================
+ Coverage   57.92%   57.95%   +0.03%     
==========================================
  Files          60       60              
  Lines        5402     5406       +4     
  Branches      600      601       +1     
==========================================
+ Hits         3129     3133       +4     
  Misses       2133     2133              
  Partials      140      140              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[olethanh]

I'm not actually sure we would need a decitated dir for the certificates, Platform certificate we can just generate in a temporary file or in the main aleph dir (there is only one file now) and certificate we get for the VM should go in the VM directory.

[nesitor]

I'm not actually sure we would need a decitated dir for the certificates, Platform certificate we can just generate in a temporary file or in the main aleph dir (there is only one file now) and certificate we get for the VM should go in the VM directory.

I think that is better to have it cached, to avoid request it all the time

[olethanh]

good point

[hoh]

I think that is better to have it cached, to avoid request it all the time

If this data is cached, should it be in CACHE_ROOT instead ?

        if not self.CONFIDENTIAL_DIRECTORY:
            self.CONFIDENTIAL_DIRECTORY = self.CACHE_ROOT / "confidential"

[hoh]

/var/cache contains data that may be deleted (ex: can be downloaded again or recreated) while /var/lib contains data that may not be lost.