Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fsverity content verification #10007

Open
wants to merge 5 commits into
base: main
Choose a base branch
from
Open

Fsverity content verification #10007

wants to merge 5 commits into from
+430 −4

Commits on Mar 28, 2024

  1. Implement fsverity functionality 

    Implement calls to the fsverity kernel module, allowing containerd to
enable fsverity on blob data in the content store. This causes fsverity
to veirfy the integrity of blob data when the blob is read.

Signed-off-by: James Jenkins <James.Jenkins@ibm.com>
    @Jenkins-J
    Jenkins-J committed Mar 28, 2024
    Configuration menu
    Copy the full SHA
    36e1ad4 View commit details
    Browse the repository at this point in the history

Commits on Apr 25, 2024

  1. Create fsverity unit tests 

    Signed-off-by: James Jenkins <James.Jenkins@ibm.com>
    @Jenkins-J
    Jenkins-J committed Apr 25, 2024
    Configuration menu
    Copy the full SHA
    9ba5d37 View commit details
    Browse the repository at this point in the history

Commits on May 6, 2024

  1. Cache IsSupported in Content Plugin 

    Cache the result of the IsSupported fsverity
method in the content plugin instead of in the
fsverity package.

Signed-off-by: James Jenkins <James.Jenkins@ibm.com>
    @Jenkins-J
    Jenkins-J committed May 6, 2024
    Configuration menu
    Copy the full SHA
    ca67f2c View commit details
    Browse the repository at this point in the history

Commits on May 7, 2024

  1. Move cached integrity supported value 

    Move cached fsverity integrity supported value
from the local content writer to the local
content store.

Signed-off-by: James Jenkins <James.Jenkins@ibm.com>
    @Jenkins-J
    Jenkins-J committed May 7, 2024
    Configuration menu
    Copy the full SHA
    10e03e6 View commit details
    Browse the repository at this point in the history

  2. Clean up IsSupported function 

    Clean up fsverity IsSupproted function, improving
readability.

Signed-off-by: James Jenkins <James.Jenkins@ibm.com>
    @Jenkins-J
    Jenkins-J committed May 7, 2024
    Configuration menu
    Copy the full SHA
    b3dc6e2 View commit details
    Browse the repository at this point in the history