| commit | 8b786897cc419483fa586fd620c3d725d7bd6a95 | [log] [tgz] |
|---|---|---|
| author | Lorenz Brun <lorenz@monogon.tech> | Thu Jan 13 14:21:16 2022 +0100 |
| committer | Lorenz Brun <lorenz@monogon.tech> | Thu Jan 13 16:46:06 2022 +0000 |
| tree | 1e4f582b8c2272b73970e4727171175320aeab7c | |
| parent | 57d06a7cfa461f367d4362ccecf4a2d66068a1f9 [diff] |
m/n/core: only warn if no TPM 2.0 has been found Currently the TPM is basically unused. The only user is the generator of node and cluster unlock keys, which get fed with both TPM and local entropy which marginally increases security. This converts a missing TPM 2.0 into a warning and falls back to generating both of those keys purely with Linux entropy, allowing Metropolis to boot on hardware without a TPM 2.0. Change-Id: I910f9768ede554e5ec2c3a35079a6799d1ee9c8c Reviewed-on: https://review.monogon.dev/c/monogon/+/514 Reviewed-by: Sergiusz Bazanski <serge@monogon.tech>
This is the main repository containing the source code for the Monogon Project.
This is pre-release software - feel free to look around, and check back later for our first release!
Our build environment requires a working Podman binary (your distribution should have one).
Spinning up: scripts/create_container.sh
Spinning down: scripts/destroy_container.sh
Running commands: scripts/run_in_container.sh <...>
Using bazel using a wrapper script: scripts/bin/bazel <...> (add to your local $PATH for convenience)
This repository is compatible with the IntelliJ Bazel plugin, which enables full autocompletion for external dependencies and generated code. All commands run inside the container, and necessary paths are mapped into the container.
The following steps are necessary:
Install Google's Bazel plugin in IntelliJ. On IntelliJ 2020.3 or later, you need to install a beta release of the plugin.
Add the absolute path to your ~/.cache/bazel-monogon folder to your idea64.vmoptions (Help → Edit Custom VM Options) and restart IntelliJ:
-Dbazel.bep.path=/home/leopold/.cache/bazel-monogon
Set "Bazel Binary Location" in Other Settings → Bazel Settings to the absolute path of scripts/bin/bazel. This is a wrapper that will execute Bazel inside the container.
Use File → Import Bazel project... to create a new project from .bazelproject.
After running the first sync, everything should now resolve in the IDE, including generated code.
Launch the node:
scripts/bin/bazel run //:launch
Run a kubectl command:
scripts/bin/bazel run //metropolis/cli/dbg -- kubectl describe
Run tests:
scripts/bin/bazel test //...