Skip to content

Add artifactmanager package#323

Open
Chounoki wants to merge 1 commit into
openconfig:mainfrom
Chounoki:pr0
Open

Add artifactmanager package#323
Chounoki wants to merge 1 commit into
openconfig:mainfrom
Chounoki:pr0

Conversation

@Chounoki
Copy link
Copy Markdown
Contributor

No description provided.

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces an in-memory artifact manager and its associated configuration protobuf definitions for the Bootz server. The implementation provides functionality for managing trust anchors, owner certificates, and chassis-specific artifacts like ownership vouchers and public keys. Review feedback suggests several improvements: using the bytes type in Protobuf for binary data instead of Base64-encoded strings for better efficiency, verifying ownership vouchers against the vendor CA pool during unmarshalling to ensure authenticity, and checking the return value of certificate pool additions to prevent silent configuration failures.

Comment thread server/proto/config.proto
Comment thread server/artifactmanager/artifactmanager.go Outdated
Comment thread server/artifactmanager/artifactmanager.go
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant