Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

boot: provide a helper for obtaining boot chains for resealing #14625

Conversation

bboozzoo
Copy link
Contributor

@bboozzoo bboozzoo commented Oct 16, 2024

Provide a dedicated helper for obtaining the boot chains relevant for
resealing of disk encryption keys.

Cherry picks from #14615

@bboozzoo bboozzoo added the FDE Manager Pull requests that target FDE manager branch label Oct 16, 2024
Copy link
Collaborator

@pedronis pedronis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

question

boot/seal.go Outdated
// BootChains constructs the boot chains which may be observed when booting the
// device such that they can be used as an input for resealing of encryption
// keys.
func BootChains(modeenv *Modeenv) (*ResealKeyForBootChainsParams, error) {
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I thought the idea we discussed was to have WithBootChains ? did you go this way because is a bit easier to explain? do we have other use cases for WithModeenv?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fair point, perhaps there is no need to provide a helper for touching modeenv. I've pushed a patch.

@bboozzoo bboozzoo changed the title boot: helper for accessing modeenv, export helper for constructing boot chains boot: provide a helper for obtaining boot chains for resealing Oct 16, 2024
Copy link
Collaborator

@pedronis pedronis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thank you

Provide a dedicated helper for obtaining the boot chains relevant for
resealing of disk encryption keys.

Signed-off-by: Maciej Borzecki <[email protected]>
@bboozzoo
Copy link
Contributor Author

Rebased on top of latest fde-manager-features content.

Copy link

codecov bot commented Oct 21, 2024

Codecov Report

Attention: Patch coverage is 67.10526% with 25 lines in your changes missing coverage. Please review.

Please upload report for BASE (fde-manager-features@bc5d9c0). Learn more about missing BASE report.

Files with missing lines Patch % Lines
boot/seal.go 67.10% 17 Missing and 8 partials ⚠️
Additional details and impacted files
@@                   Coverage Diff                   @@
##             fde-manager-features   #14625   +/-   ##
=======================================================
  Coverage                        ?   78.87%           
=======================================================
  Files                           ?     1092           
  Lines                           ?   147425           
  Branches                        ?        0           
=======================================================
  Hits                            ?   116283           
  Misses                          ?    23891           
  Partials                        ?     7251           
Flag Coverage Δ
unittests 78.87% <67.10%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@Meulengracht Meulengracht merged commit 0398511 into canonical:fde-manager-features Oct 21, 2024
44 of 57 checks passed
@bboozzoo bboozzoo deleted the bboozzoo/export-from-boot branch October 21, 2024 12:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
FDE Manager Pull requests that target FDE manager branch
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants