Repository navigation
Conversation
Adds tinycloud-at-rest-escrow (2-of-3 Shamir shares of the at-rest root key, sealed to pinned age recipients; bundle, fingerprint, verification record, recovery identity and strict app-compose reading). Taken unchanged from #325; the ceremony CLI from #325 stays on that branch for the hardware-key slice. The production compose comment is made ASCII-only so the strict compose reader accepts the file (its test reads it).
The compose file is pinned by its template hash, so the escrow crate no longer reads it in a test; checking the production compose against the strict reader belongs with the change that configures at-rest in it.
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
TC-887. First PR of the refreshed at-rest stack. Replaces the crate part of #325.
What
tinycloud-at-rest-escrowworkspace crate, unchanged from feat(TC-887): at-rest key escrow crate and ceremony CLI #325 (ca6bfb3): 2-of-3 Shamir shares of the at-rest root key sealed to pinned age recipients, the bundle and its fingerprint, the verification record, the recovery identity, and the strict app-compose reader.COPY, release-plz entry (release = false,publish = false), andCargo.lockadditions only (no existing package version moves).Not here
tinycloud-at-rest-cli) stays on feat(TC-887): at-rest key escrow crate and ceremony CLI #325's branch. It lands with the hardware-key escrow slice.Stack
4-6. sealed KV block storage (from feat(TC-887): sealed KV block helpers and plaintext sizes by space tag #329, feat(TC-887): seal KV blocks in the FileSystem store; prepare writes before the invoke lock #333, feat(TC-887): seal KV blocks in the S3 store (S3c, stacked on #333) #336)
Verification
cargo test --locked -p tinycloud-at-rest-escrow: 33 passedcargo clippy --locked -p tinycloud-at-rest-escrow --all-targetswith-Dwarnings: cleancargo fmt --all -- --check: clean