pool/rust-keylime-image
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 1031955 from home:aplanas:branches:devel:microos:containers

Browse Source 
- Rename the published image to "keylime-agent"
- Rename the volumes and container default name, and the configuration
  file under "keylime-agent-XXXX"
- Update the README for use new name
- Drop rust-keylime-start.sh CMD script
- Replace "-a" with "&&" in the configure script
- Drop docker-entrypoint.sh script
- Add README documentation
- Initial image based on Keylime 6.5.1

OBS-URL: https://build.opensuse.org/request/show/1031955
OBS-URL: https://build.opensuse.org/package/show/devel:microos:containers/rust-keylime-image?expand=0&rev=5
This commit is contained in:
Alberto Planas 2022-10-28 13:01:00 +00:00 committed by Git OBS Bridge
parent 14b9396b54
commit 85e6dfd335
2 changed files with 10 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
README
View File

@ -16,7 +16,7 @@ The container is already present in the OBS project
devel:microos:containers, and can be pulled directly from it.
podman pull \
registry.opensuse.org/devel/microos/containers/containerfile/opensuse/rust-keylime:latest
registry.opensuse.org/devel/microos/containers/containerfile/opensuse/keylime-agent:latest
The agent service needs to be configured before it can be used. It
will need a persistent volume where to store the certificates and the
@ -24,9 +24,9 @@ configuration files required to find the control plane services. We
can create this volume running the "install" label.
podman container runlabel install \
registry.opensuse.org/devel/microos/containers/containerfile/opensuse/rust-keylime:latest
registry.opensuse.org/devel/microos/containers/containerfile/opensuse/keylime-agent:latest
This will create the "rust-keylime-volume" that will be attached into
This will create the "keylime-agent-volume" that will be attached into
the running container.
Now we need to create a configuration file, were we indicate the UUID
@ -34,7 +34,7 @@ for the agent and the IP of the remote verifier and registrar. For
that we can run the "configure" label.
podman container runlabel configure \
registry.opensuse.org/devel/microos/containers/containerfile/opensuse/rust-keylime:latest \
registry.opensuse.org/devel/microos/containers/containerfile/opensuse/keylime-agent:latest \
$(uuidgen) 10.88.0.1
The last configuration step is to copy the certificate from the
@ -46,22 +46,22 @@ of the control plane container.
One way to copy the certificate is mounting the volume generated
during the first step.
podman volume mount rust-keylime-volume
podman volume mount keylime-agent-volume
cp -a cacert.crt \
/var/lib/containers/storage/volumes/rust-keylime-volume/_data/cv_ca/.
/var/lib/containers/storage/volumes/keylime-agent-volume/_data/cv_ca/.
We can now start the agent.
podman container runlabel run \
registry.opensuse.org/devel/microos/containers/containerfile/opensuse/rust-keylime:latest
registry.opensuse.org/devel/microos/containers/containerfile/opensuse/keylime-agent:latest
We can monitor the status with podman.
podman ps
podman logs rust-keylime-container
podman logs keylime-agent-container
And finally, we can stop the services via the kill command.
podman kill rust-keylime-container
podman kill keylime-agent-container

1
rust-keylime-image.changes
View File

@ -4,6 +4,7 @@ Fri Oct 28 12:51:07 UTC 2022 - Alberto Planas Dominguez <aplanas@suse.com>
- Rename the published image to "keylime-agent"
- Rename the volumes and container default name, and the configuration
file under "keylime-agent-XXXX"
- Update the README for use new name
-------------------------------------------------------------------
Thu Oct 20 11:03:57 UTC 2022 - Alberto Planas Dominguez <aplanas@suse.com>