https://github.com/confidential-containers/trustee
Attestation and Secret Delivery Components
Science Score: 26.0%
This score indicates how likely this project is to be science-related based on various indicators:
-
○CITATION.cff file
-
✓codemeta.json file
Found codemeta.json file -
✓.zenodo.json file
Found .zenodo.json file -
○DOI references
-
○Academic publication links
-
○Academic email domains
-
○Institutional organization owner
-
○JOSS paper metadata
-
○Scientific vocabulary similarity
Low similarity (11.2%) to scientific vocabulary
Keywords
Repository
Attestation and Secret Delivery Components
Basic Info
Statistics
- Stars: 103
- Watchers: 20
- Forks: 123
- Open Issues: 117
- Releases: 10
Topics
Metadata Files
README.md
Trusted Components for Attestation and Secret Management
This repository contains tools and components for attesting confidential guests and providing secrets to them. Collectively, these components are known as Trustee. Trustee typically operates on behalf of the guest owner and interact remotely with guest components.
Trustee was developed for the Confidential Containers project, but can be used with a wide variety of applications and hardware platforms.
Components
Key Broker Service The KBS is a server that facilitates remote attestation and secret delivery. Its role is similar to that of the Relying Party in the RATS model.
Attestation Service The AS verifies TEE evidence. In the RATS model this is a Verifier
Reference Value Provider Service The RVPS manages reference values used to verify TEE evidence. This is related to the discussion in section 7.5 of the RATS document.
KBS Client Tool This is a simple tool which can be used to test or configure the KBS and AS.
For further information, see documentation of individual components.
Architecture
Trustee is flexible and can be deployed in several different configurations. This figure shows one common way to deploy these components in conjunction with certain guest components.
mermaid
flowchart LR
AA -- attests guest ----> KBS
CDH -- requests resource --> KBS
subgraph Guest
CDH <.-> AA
end
subgraph Trustee
AS -- verifies evidence --> KBS
RVPS -- provides reference values--> AS
end
client-tool -- configures --> KBS
Deployment
There are two main ways to deploy Trustee.
Docker Compose
One simple way to get started with Trustee is with Docker compose, which can be used to quickly setup a cluster matching the diagram above.
Please refer to the cluster setup guide.
This cluster could be run inside a VM or as part of a managed service.
Kubernetes
There are two supported ways of deploying Trustee on Kubernetes. One is via the KBS Operator, which deploys the KBS components. The second option is to use the KBS' provided Kubernetes tooling here.
License
Owner
- Name: Confidential Containers
- Login: confidential-containers
- Kind: organization
- Repositories: 16
- Profile: https://github.com/confidential-containers
Issues and Pull Requests
Last synced: 6 months ago
All Time
- Total issues: 118
- Total pull requests: 421
- Average time to close issues: 3 months
- Average time to close pull requests: 6 days
- Total issue authors: 34
- Total pull request authors: 45
- Average comments per issue: 1.71
- Average comments per pull request: 1.03
- Merged pull requests: 280
- Bot issues: 1
- Bot pull requests: 144
Past Year
- Issues: 67
- Pull requests: 309
- Average time to close issues: 11 days
- Average time to close pull requests: 4 days
- Issue authors: 25
- Pull request authors: 36
- Average comments per issue: 1.01
- Average comments per pull request: 0.84
- Merged pull requests: 199
- Bot issues: 1
- Bot pull requests: 120
Top Authors
Issue Authors
- fitzthum (27)
- Xynnn007 (16)
- mkulke (9)
- mythi (5)
- huoqifeng (4)
- tylerfanelli (4)
- ccxiaop (4)
- thomas-fossati (4)
- niteeshkd (3)
- AdithyaKrishnan (3)
- litian1992 (3)
- deeglaze (3)
- ssolit (3)
- ChengyuZhu6 (3)
- fidencio (2)
Pull Request Authors
- dependabot[bot] (144)
- fitzthum (55)
- Xynnn007 (53)
- mythi (32)
- pawelpros (20)
- huoqifeng (15)
- mkulke (14)
- tylerfanelli (8)
- kartikjoshi21 (6)
- BbolroC (6)
- portersrc (5)
- seungukshin (5)
- pmores (4)
- AdithyaKrishnan (4)
- ChengyuZhu6 (3)
Top Labels
Issue Labels
Pull Request Labels
Dependencies
- actions-rs/toolchain v1 composite
- actions/checkout v3 composite
- 315 dependencies