What I'd like:
I'd like the ability to override some of the hard-coded behavior in rottweiler via drop-ins:
- PCRs for sealing keys
- Settings to exclude
Any alternatives you've considered:
Keep the hard-coded paths. These are inflexible and won't easily extend to downstream builds. For example, we know that aws-k8s-* builds will set settings.kubernetes.hostname-override to a host-specific value, which then makes the PCR 8 measurement unique.
What I'd like:
I'd like the ability to override some of the hard-coded behavior in
rottweilervia drop-ins:Any alternatives you've considered:
Keep the hard-coded paths. These are inflexible and won't easily extend to downstream builds. For example, we know that
aws-k8s-*builds will setsettings.kubernetes.hostname-overrideto a host-specific value, which then makes the PCR 8 measurement unique.