-
Notifications
You must be signed in to change notification settings - Fork 72
Push Model: Perform attestation (quote, uefi and ima logs) #1038
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Push Model: Perform attestation (quote, uefi and ima logs) #1038
Conversation
3088cad to
3533b30
Compare
7420194 to
703142b
Compare
66c83c2 to
7a0bd46
Compare
5e0796a to
910c049
Compare
6f67573 to
21cebe0
Compare
|
@ansasaki , @sergio-correia : Please, don't pay attention to coverage. Locally, files such as |
Signed-off-by: Sergio Arroutbi <sarroutb@redhat.com>
Signed-off-by: Sergio Arroutbi <sarroutb@redhat.com> Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
21cebe0 to
ebfef73
Compare
Signed-off-by: Sergio Arroutbi <sarroutb@redhat.com> Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
Signed-off-by: Sergio Arroutbi <sarroutb@redhat.com>
This includes fixes to tests to avoid race conditions when accessing the TPM Signed-off-by: Sergio Arroutbi <sarroutb@redhat.com> Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
Signed-off-by: Sergio Arroutbi <sarroutb@redhat.com> Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
Signed-off-by: Sergio Arroutbi <sarroutb@redhat.com>
Signed-off-by: Sergio Arroutbi <sarroutb@redhat.com> Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
Signed-off-by: Sergio Arroutbi <sarroutb@redhat.com>
Signed-off-by: Sergio Arroutbi <sarroutb@redhat.com>
Signed-off-by: Sergio Arroutbi <sarroutb@redhat.com>
Signed-off-by: Sergio Arroutbi <sarroutb@redhat.com>
Annotate unwrap() to allow it in tests Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
ebfef73 to
1448822
Compare
|
EDIT: It seems it won't be necessary. I'll merge this and rebase the other |
Cool. Thank you so much for your help with the rebase. |

This PR enhances the push-model agent by adding the complete logic for IMA and UEFI log collection and submission, making the attestation process asynchronous, and refactoring the agent's main loop for clarity and robustness.
Key Changes:
Full IMA and UEFI Log Collection:
The agent now properly handles requests for IMA and UEFI event logs.
Asynchronous Attestation:
The entire evidence creation process is now asynchronous to prevent blocking.
Code Refactoring and Cleanup:
Added the core perform_attestation function to ContextInfo, centralizing the logic for creating attestation evidence.
The main agent binary's logic has been significantly refactored. The main.rs file now orchestrates the high-level flow, while the specifics of sending HTTP requests and handling responses have been moved into a dedicated attestation.rs module.