mirror of
https://github.com/systemd/systemd.git
synced 2025-01-18 10:04:04 +03:00
update TODO
This commit is contained in:
parent
c95df5879e
commit
ee7561d014
11
TODO
11
TODO
@ -22,6 +22,17 @@ Janitorial Clean-ups:
|
|||||||
|
|
||||||
Features:
|
Features:
|
||||||
|
|
||||||
|
* ability to insert trusted configuration and secrets into the boot paramaters
|
||||||
|
of a kernel booting in a VM or on baremetal some way, via TPM
|
||||||
|
protection. idea:
|
||||||
|
1. pass via /proc/bootconfig
|
||||||
|
2. for secrets: put secrets in node of /proc/bootconfig, decrypt them via
|
||||||
|
TPM early on in PID 1, put them in $CREDENTIAL_PATH logic
|
||||||
|
3. for config: put signed data in node /proc/booconfig, validate via TPM
|
||||||
|
early on in PID 1, put data into /run/bootconfig/ as individual files
|
||||||
|
4. boot loader/stub should pick these up automatically from the boot loader
|
||||||
|
file systems
|
||||||
|
|
||||||
* journald: support RFC3164 fully for the incoming syslog transport, see
|
* journald: support RFC3164 fully for the incoming syslog transport, see
|
||||||
https://github.com/systemd/systemd/issues/19251#issuecomment-816601955
|
https://github.com/systemd/systemd/issues/19251#issuecomment-816601955
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user