| commit | f1628ac0972b8ee7da19322514dc229872b5982b | [log] [tgz] |
|---|---|---|
| author | Serge Bazanski <serge@monogon.tech> | Thu May 25 14:43:19 2023 +0200 |
| committer | Serge Bazanski <serge@monogon.tech> | Wed May 31 12:25:21 2023 +0000 |
| tree | 9720402ab66d83dbd69844ffea60403e73756f26 | |
| parent | 2b0f3d3df1fd3f71b57bb2ea581a649678b2451e [diff] |
m/n/core/localstorage/crypt: support more enc/auth modes This is in preparation for introducing configurable disk encryption/authentication policies in Metropolis (eg. low integrity mode). We also use the opportunity to add some tests for the newly refactored crypt library. All modes go through an end-to-end test making sure data is preserved and repeatedly mapping/unmapping the device works. This change also disables insecure mode in debug builds. The equivalent functionality will be re-established at a higher level in the cluster code in a subsequent change, alongside the encryption/authentication policy code. Change-Id: I85db001c7c37a918cb491b1fcc3a51ea1d715817 Reviewed-on: https://review.monogon.dev/c/monogon/+/1724 Tested-by: Jenkins CI Reviewed-by: Lorenz Brun <lorenz@monogon.tech>
This is the main repository containing the source code for the Monogon Platform.
This is pre-release software - take a look, and check back later!
Our build environment is self-contained and requires only minimal host dependencies:
/dev/kvm (if you want to run tests).Our docs assume that Bazelisk is available as bazel on your PATH.
Refer to SETUP.md for detailed instructions.
Build CLI and node image:
bazel build //metropolis/cli/dbg //:launch -c dbg
Launch an ephemeral test node:
bazel test //:launch -c dbg --test_output=streamed
Run a kubectl command while the test is running:
bazel-bin/metropolis/cli/dbg/dbg_/dbg kubectl describe node
Run full test suite:
bazel test -c dbg //...