Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DNM: OCI layer signature support #304

Open
wants to merge 52 commits into
base: msft-main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
52 commits
Select commit Hold shift + click to select a range
1cac817
Debug: modify Makefile
miz060 Dec 6, 2024
307c553
prototype implementation dm-verity
miz060 Dec 6, 2024
373d97d
debug1
miz060 Dec 6, 2024
acb4830
debug2
miz060 Dec 6, 2024
44923d2
debug3
miz060 Dec 6, 2024
4bc9b10
debug4
miz060 Dec 6, 2024
df43ebe
debug5
miz060 Dec 6, 2024
1092096
debug6
miz060 Dec 6, 2024
ab0e444
debug7
miz060 Dec 6, 2024
fc7bdd3
debug8
miz060 Dec 6, 2024
f5c5b5a
debug9
miz060 Dec 6, 2024
efbfe83
debug10
miz060 Dec 6, 2024
dc68ce4
debug11
miz060 Dec 6, 2024
8f948ad
debug11
miz060 Dec 6, 2024
0b27725
debug12
miz060 Dec 6, 2024
f17e27d
12/10 debug1
miz060 Dec 10, 2024
64cdeb9
Add more debug info
miz060 Dec 12, 2024
0dff4cc
add more logs
miz060 Dec 12, 2024
c6b4174
do mount only with mount flow
miz060 Dec 13, 2024
7c00acc
Add tarfs mounting
miz060 Dec 17, 2024
ed6c9ee
Remove unnecessary directory replication during overlayfs creation
miz060 Dec 18, 2024
ef8e42c
Remove wrong clear and check lowerdir string length
miz060 Dec 21, 2024
1fb34af
Initial support for container verity image signing
jiria Dec 13, 2024
ccc52f7
Add support for random salt
jiria Dec 18, 2024
441327e
Use layer_digest instead of diff_id and also support bulk import of i…
jiria Dec 19, 2024
4ac972b
Update snapshotter to include support for using verity root hash sign…
jiria Dec 19, 2024
c8ba8de
Better error messages
jiria Dec 19, 2024
89e8898
Use format
jiria Dec 21, 2024
02fb5b9
Switch overlay mounting logic
jiria Dec 31, 2024
1466645
Cleanup the service file
jiria Dec 31, 2024
5e3dd0d
Add input checks
jiria Jan 1, 2025
4386a18
Update .service to make it more resilient
jiria Jan 3, 2025
553984a
Store salts and sigs in the labels to allow for reloading of the sign…
jiria Jan 3, 2025
14d4b03
Extend the signing tool to support uncompressed layers
jiria Jan 3, 2025
6cb5b30
Add support for docker tar layers
jiria Jan 3, 2025
701efad
Use mediatype label from containerd
jiria Jan 6, 2025
0820687
Extend layer decompression based on mediatype label from containerd
miz060 Jan 6, 2025
e361b00
Fix fetching and renaming order
miz060 Jan 7, 2025
2d3c817
refactor to avoid error
miz060 Jan 7, 2025
fe5e1ce
Address comment
miz060 Jan 7, 2025
f310713
Merge pull request #284 from microsoft/mitchzhu/solar
miz060 Jan 7, 2025
ea3822c
Cleanup naming plus workaround
jiria Jan 7, 2025
40f0d90
Do not truncate if reusing the existing image
jiria Jan 7, 2025
e938ee4
Improve tardev logging
miz060 Jan 8, 2025
35a02ac
Add info logging
miz060 Jan 8, 2025
a7e7b99
Add error mapping
miz060 Jan 8, 2025
f19e9d1
Merge pull request #289 from microsoft/mitchzhu/improve_tardev_logs
miz060 Jan 8, 2025
cedcd2b
Cleanup white spaces
jiria Jan 12, 2025
8b742d9
Use "overlay" as a source when mounting overlay
jiria Jan 13, 2025
24ed368
Add retry logic to layer fetching and decompression
miz060 Jan 13, 2025
fdfa224
Address comment
miz060 Jan 16, 2025
66d2248
Merge pull request #291 from microsoft/mitchzhu/add_retry
miz060 Jan 16, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
208 changes: 206 additions & 2 deletions src/tardev-snapshotter/Cargo.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

9 changes: 9 additions & 0 deletions src/tardev-snapshotter/Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -20,3 +20,12 @@ tempfile = "3.3.0"
flate2 = { version = "1.0.26", features = ["zlib-ng"], default-features = false }
base64 = "0.21.2"
containerd-client = "0.4.0"
uuid = { version = "1.0", features = ["v4"] }
nix = "0.24.2"
devicemapper = "0.33.1"
anyhow = "=1.0.58"
zerocopy = "0.6.1"

# YAML file serialization/deserialization.
serde = { version = "1.0.159", features = ["derive"] }
hex = { version = "0.4.3" }
Loading
Loading