Skip to content

feat: add script to create security manifest#28

Draft
alesancor1 wants to merge 5 commits intomainfrom
feat/security-manifest
Draft

feat: add script to create security manifest#28
alesancor1 wants to merge 5 commits intomainfrom
feat/security-manifest

Conversation

@alesancor1
Copy link
Copy Markdown
Member

@alesancor1 alesancor1 commented Mar 12, 2025

Wrapper script uses the chisel wrapper to generate a security manifest based on dpkg status.

Usage: security-manifest [OPTIONS] -- <slice names..>
Example: security-manifest --cleanup --rootfs myfs -- --release ubuntu-20.04 libc6_libs

Copy link
Copy Markdown
Collaborator

@cjdcordeiro cjdcordeiro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks for this :)

before looking at the code, could you please move the script into a dedicated folder? The chisel-wrapper ended up at the root level just because it was the first one and and the sole reason why we created this repo, but all the subsequent tools ended up having their own folder.

P.S. it would also be nice to have a PR description. This is useful for the future, if ever we need to come back to this PR and try to understand the context and motivation that led to this change.

@alesancor1 alesancor1 marked this pull request as draft March 14, 2025 12:11
@alesancor1
Copy link
Copy Markdown
Member Author

From @cjdcordeiro:

The Fetch Service will be enabled in the OCI Factory soon and it will produce a manifest that includes all sw components, including slices.

This means we can use such manifest to create the dpkg.query manifest for security. The input may be different so the script I created will need some tweaks. The script should be wrapped into an action afterwards.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants