2023-04-10 03:03:51 +00:00
|
|
|
# TODO
|
|
|
|
|
|
2023-04-10 03:05:28 +00:00
|
|
|
## General
|
|
|
|
|
|
|
|
|
|
- bazel setup
|
|
|
|
|
- tooling setup
|
|
|
|
|
|
2023-04-12 08:01:57 +00:00
|
|
|
## Dockerfiles
|
|
|
|
|
|
|
|
|
|
- move to an OCI setup
|
|
|
|
|
|
2023-04-10 03:03:51 +00:00
|
|
|
## Provisioning
|
|
|
|
|
|
|
|
|
|
- packer image building
|
|
|
|
|
- ansible deployment
|
2023-04-12 08:01:57 +00:00
|
|
|
- initrd/initramfs for auto FDE
|
|
|
|
|
- using dracut?
|
2023-04-10 03:03:51 +00:00
|
|
|
|
2023-04-10 03:05:28 +00:00
|
|
|
## Secure computing
|
2023-04-10 03:03:51 +00:00
|
|
|
|
|
|
|
|
- TPM provisioning
|
|
|
|
|
- TPM identity data store
|
2023-04-10 03:05:28 +00:00
|
|
|
- automated FDE on provisioning
|
|
|
|
|
- secure boot
|
|
|
|
|
- SLSA level 3 for repo
|
|
|
|
|
- level 4 isn't feasible with only a single author
|
2023-04-10 03:03:51 +00:00
|
|
|
|
|
|
|
|
## Documentation
|
|
|
|
|
|
2023-04-10 04:19:33 +00:00
|
|
|
- functional specs for everything
|
