XML

Word

Printable

Epic Name:
Create integrity-protected pod VM image Azure
Work Type:
BU Product Work
Story Points:
5
Blocked:
False
Blocked Reason:
None
Ready:
False
Parent Link:
KATA-3346Use RHEL image mode for building Kata (pod) VM image
Color Status:
Not Selected
Epic Status:
To Do
Feature Link:
KATA-3346 - Use RHEL image mode for building Kata (pod) VM image
Intelligence Requested:
Market:
Product Documentation Required:
No

Epic Goal

Why is this important?

For CoCo, it's important to ensure that the VM image has not been tampered with, otherwise secrets can be exfiltrated via tampered software.

(The Epic is complete when...)

Instructions to create dm-verity protected CVM image for peer-pods via operator or standalone
Instructions to generate measurements of the image
Verifying the measurements via KBS

Upstream has a method that is described in the following blog

Vitaly has instructions on how create dm-verity protected CVM images in public cloud

is depended on by

KATA-2715 Create measurements for all the components used in the CoCo stack