Open
Milestone
Dec 1, 2024–Apr 28, 2025
Virtual Test System
This milestone concerns itself with the requirements for and deployment of a test system.
The test system will feature a self-updating image-based OS, that integrates with a containerized NetHSM as backend.
Display by
Burndown chart
Remaining
Guideline
Burnup chart
Total
Completed
Unstarted Issues (open and unassigned)
7
- Add logging to systemd-journal for crates that require it
- Implement remaining system user types for Signstar hosts
- Create an executable for creating mock signatures
- Configure promtail to send local journal to loki
- Configure syslog-ng to accept syslog from NetHSM and promtail to consume syslog and forward to loki
- Add integration for setting up wireguard tunnel for logs and metrics
- Create configurator tool
Completed Issues (closed)
15
- Specify signing response format
- Create a library to abstract the handling of all configurations on Signstar hosts
- Create central crate for providing low-level defaults for Signstar hosts
- Create a library for authenticating the user
- Implement configuration field for specifying secret handling mechanism
- Investigate the use of systemd credentials for non-administrative passphrases
- `signstar-configure-build` is in repos now: mkosi scripts needs cleanups
- Extend `signstar-request-signature` to support sending signatures over SSH
- Add tool for creating user integration when building OS image
- Add CI integration for automatically building the OS images
- Add system for building image based OS
- Evaluate scheme for ongoing SSH hostkey verification
- Devise mechanism for dealing with (changing of) administrative credentials
- Implement validation of NetHSM backups
- Add system documentation
Loading
Loading
Loading