oxidecomputer / oxidecomputer/hubris
attestation API suitable for use from `(faux-)?mgs`
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 3.6k
- Forks
- 239
- Avg merge
- 1d 12h
- Merged PRs (30d)
- 23
Description
The current interface / IDL from the Attest and Sprot tasks currently works over the SWD probes. I've been thinking of this API as experimental since we don't expose it outside of the SP / over MGS yet. The humility hiffy interface is effectively the API to this and it's only consumer is the verifier-cli tool here: https://github.com/oxidecomputer/dice-util/tree/main/verifier-cli. This is a start but it's not sufficient for use from pilot racktest in the way we need for manufacturing: https://github.com/oxidecomputer/facade/issues/115
This issue is intended to track the work in hubris required to expose the attestation API off-platform for use by things like (faux-)?mgs and pilot racktest.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading the existing Attest and Sprot interfaces and the humility hiffy interface, then inspect the verifier-cli consumer. Compare those interfaces with the manufacturing requirements described in facade#115 for pilot racktest and (faux-)?mgs. Done means hubris exposes a suitable off-platform attestation API.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- api, embedded-iot, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100