Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add tt integrity check options #4341

Merged
merged 11 commits into from
Jul 10, 2024
Merged

Add tt integrity check options #4341

merged 11 commits into from
Jul 10, 2024

Conversation

p7nov
Copy link
Contributor

@p7nov p7nov commented Jul 4, 2024

Resolves: https://github.com/tarantool/enterprise_doc/issues/261, https://github.com/tarantool/enterprise_doc/issues/262, https://github.com/tarantool/enterprise_doc/issues/263

Added information about integrity checks in tt-ee:

  • tt global options: new option --integrity-check
  • tt pack: a subsection about generating files for integrity check, --with-integrity-check option
  • tt start: a subsection about starting apps with integrity check, --integrity-check-period option
  • tt cluster: a subsection about publishing config with the integrity check artifacts.

Deployment: https://docs.d.tarantool.io/en/doc/gh-261ee-tt-integrity-check/reference/tooling/tt_cli/start/#integrity-check

@p7nov p7nov requested a review from AlgebraicWolf July 4, 2024 11:13
Copy link

@AlgebraicWolf AlgebraicWolf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for the patch! Just a small nitpick left:

doc/reference/tooling/tt_cli/pack.rst Outdated Show resolved Hide resolved
@p7nov p7nov requested a review from oleg-jukovec July 5, 2024 11:07
doc/reference/tooling/tt_cli/cluster.rst Outdated Show resolved Hide resolved
Comment on lines 133 to 138
If an application configuration is published this way, it can be checked for integrity
using the ``--integrity-check`` :ref:`global option <tt-global-options>`.

.. code-block:: console

$ tt --integrity-check public.pem start myapp
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It could be checked with tt cluster show and used with tt start.

doc/reference/tooling/tt_cli/pack.rst Outdated Show resolved Hide resolved
doc/reference/tooling/tt_cli/start.rst Outdated Show resolved Hide resolved
doc/reference/tooling/tt_cli/start.rst Outdated Show resolved Hide resolved
Comment on lines +109 to +110
using the checksums and starts the application in case of the success. Then, integrity
checks are performed periodically while the application is running. By default,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

tarantool also checks hashes/signs of modules on the load time (require('module') is called).

p7nov and others added 3 commits July 8, 2024 17:23
Co-authored-by: Oleg Jukovec <oleg.jukovec@gmail.com>
@p7nov p7nov requested a review from xuniq July 8, 2024 10:38
doc/reference/tooling/tt_cli/cluster.rst Outdated Show resolved Hide resolved
doc/reference/tooling/tt_cli/start.rst Outdated Show resolved Hide resolved
p7nov and others added 2 commits July 10, 2024 11:15
Co-authored-by: Kseniia Antonova <73473519+xuniq@users.noreply.github.com>
@p7nov p7nov merged commit 089122e into latest Jul 10, 2024
1 check passed
@p7nov p7nov deleted the gh-261ee-tt-integrity-check branch July 10, 2024 04:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants