ondras-snaps

~ondrak/ondras-snaps/+git/snapd:preseed-delegated

  1. Git
  2. lp:~ondrak/ondras-snaps/+git/snapd
  3. preseed-delegated
Last commit made on 2023-09-25
Get this branch:
git clone -b preseed-delegated https://git.launchpad.net/~ondrak/ondras-snaps/+git/snapd

Branch merges

Branch information

Name:
preseed-delegated
Repository:
lp:~ondrak/ondras-snaps/+git/snapd

Recent commits

b30f35e... by Lauren Brock

cmd/snap-preseed: simplify assertion fetching

Signed-off-by: Joseph Brock <email address hidden>
Signed-off-by: Ondrej Kubik <email address hidden>

f6ff8fa... by Lauren Brock

cmd/snap-preseed: fix tests

Signed-off-by: Joseph Brock <email address hidden>
Signed-off-by: Ondrej Kubik <email address hidden>

8feecd6... by Lauren Brock

cmd/snap-preseed: retrieve assertions based on preseed signing key

Signed-off-by: Joseph Brock <email address hidden>
Signed-off-by: Ondrej Kubik <email address hidden>

7059dcf... by Lauren Brock

cmd/snap/prepare-image: simplify assertion type casting

Signed-off-by: Joseph Brock <email address hidden>
Signed-off-by: Ondrej Kubik <email address hidden>

e2cb2e2... by Lauren Brock

cmd/snap/prepare-image, cmd/snap-preseed: implement preseed delegation

preseed: resolve preseed signing key as early as possible

cmd/snap/prepare-image: implement authority delegation

image: ensure preseed key is allowed by the model

image: fix image preseed tests

prepare-image: improve preseed test implementations

cmd/snap-preseed: fix uc20 tests

image/preseed: fix tests

image/preseed: check for account assert in tests

image/preseed: emit an error if opts.PreseedAccountAssert is nil

Signed-off-by: Joseph Brock <email address hidden>
Signed-off-by: Ondrej Kubik <email address hidden>

2d76156... by Ondrej Kubik

TEST: allow install improvements in unpreseeded images

Signed-off-by: Ondrej Kubik <email address hidden>

2e118f0... by Ondrej Kubik

cmd: snap-bootstrap: handle factory reset from initrd

Signed-off-by: Ondrej Kubik <email address hidden>

5e46c92... by Ondrej Kubik

secboot: allow configuration of the fdekeymanager executable name

During normal runtime fdekeymanager executable is snap-fde-keymgr (part of the snapd snap)
When running within initramfs, effort is made to avoid multiple go binaries,
so fdekeymanager functionality is provided by snap-bootstrap
Provide option to set fdekeymanager executable name to support snap-bootstrap run environment.

Signed-off-by: Ondrej Kubik <email address hidden>

0966ce6... by Ondrej Kubik

cmd: snap-bootstrap: add fdekeymgr functionality

Signed-off-by: Ondrej Kubik <email address hidden>

eea8bfe... by Ondrej Kubik

cmd/snap-fde-keymgr: rework test after sub-package introduction

Signed-off-by: Ondrej Kubik <email address hidden>