containers / containers/ocicrypt
ocicrypt for KMS and TPM
- Dominant language
- Go
- Stars
- 193
- Forks
- 42
- Avg merge
- 13h 46m
- Merged PRs (30d)
- 1
Description
not an issue but thought i'd add it here incase anyone is interested.
a bit ago if fiddled with ocicrypt key providers and came up with basic (alpha quality, charitably) ways to support ocicrypt with KMS (GCP for now) and TPM
* https://github.com/salrashid123/ocicrypt-kms-keyprovider
allows you to encrypt a layer with GCP KMS
* https://github.com/salrashid123/ocicrypt-tpm-keyprovider
allows you to encrypt an image remotely with a TPM's endorsement publicc key (EKPub). image is encrypted in such a way that it can only get decrypted on *that* tpm that owns the EK. You can also encrypt it remotely such that the target machine is in a specific state (as described by PCR values)
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.