-
Story
-
Resolution: Unresolved
-
Medium
-
None
-
None
-
None
-
Product / Portfolio Work
-
False
-
-
False
-
-
-
0
- Update the CoCo guide with modules for customizing environment by creating initrd.
- Update Trustee guide with parameters for initrd customizations in attestation policy.
Use cases (from parent epic):
- As a Security Officer, I need the initrd build process to generate a measurement hash so this can be used in attestation policies to ensure the integrity of the guest environment.
- As a Security Officer, I want the default CoCo guest environment to have a restrictive policy (e.g., no exec access) to minimize the attack surface.
- As a Developer, I want to enable a debug mode for a specific CoCo pod so I can troubleshoot issues inside the guest.
- As a DevOps Engineer, I need a container image with all the necessary tools (kata-osbuilder, etc.) so I can build a custom initrd with my company's CA certificates.
- As a DevOps Engineer, I want to be able to add custom entries to the /etc/hosts file within the initrd to resolve internal service names.
Suggested modules for CoCo guide:
- About initrd (concept) - What it is, why the user would want to create it, what the user can accomplish with initrd. Describe the use cases
- Creating initrd (procedure)
Update for Trustee guide: attestation policy.