Meeting 24/07/24 Note this time 17:00 BST!

[THS-on]

Attendees

• @ansasaki
• @aplanas
• @deeglaze
• @edwards-n
• @galmasi
• @Isaac-Matthews
• @kkaarreell
• @lkatalin
• @lukehinds
• @maugustosilva
• @mayaCostantini
• Marcos Tork
• @mdrocco
• @mbestavros
• @mheese
• @mruffin
• @mpeters
• Niteesh Dubey
• @osresearch
• @ruocco
• @stringlytyped
• @stefanberger
• @THS-on
• @tpletcher-hpe
• @tylerfanelli
• @ueno
• @sergio-correia
• Supreshna
• Shiva Dasari
• Christian Schilling

Time: 24/07/24 17:00 BST (https://www.timeanddate.com/worldclock/fixedtime.html?msg=Keylime+Meeting&iso=20231025T1700&p1=136&ah=1)

Meeting link: https://uni-kiel.zoom-x.de/j/62369420015?pwd=faCUFRXmWSGwJcQUobsREl9vIU8fvM.1

Agenda

• Workstreams

  • Updates on the next steps for Add new web framework and re-implement existing REST APIs keylime#1523
    • Measured Boot data models are getting converted
    • Registrar will likely include the trust store first
    • Current verifier will be converted to new framework
  • Updates on the work on the attestation operator
    • Development currently halted -> depends also on push model implementation
  • TEE presentation by Tyler
    • Detailed notes can be found here TEE Boot Attestation proposal enhancements#108 (comment)
  • Consideration of CoRIM for reference values
    • deferred to next meeting
  • Fedora container issue
    • Copy a known good image to our name space
    • Update on release

• Open PRs

  • Enhancement 110: add tool to handle keylime policies  keylime#1568
    • Mostly good only small changes requested
  • Add support for a reject list in runtime policy keylime#1545
    • deferred to next meeting

[mheese]

I'm interested to get some updates on the work for the attestation operator. Last to my knowledge Red Hat wanted to continue the work here. I am particularly curious about the policy design. However, all I can see is work to make the deployment possible through a CRD (true operator essentially).