|
8 months ago | |
---|---|---|
contrib | 8 months ago | |
migrations | 8 months ago | |
src | 8 months ago | |
tests | 8 months ago | |
.gitignore | 8 months ago | |
.gitlab-ci.yml | 1 year ago | |
Cargo.lock | 8 months ago | |
Cargo.toml | 8 months ago | |
Makefile | 11 months ago | |
README.md | 8 months ago | |
diesel.toml | 10 months ago |
pacman -S rust tpm2-tss llvm clang diesel-cli
Build Binary:
cargo build
Build Documentation:
cargo doc --no-deps
export RUST_LOG=debug;
pacman -S tpm2-tss
tap_service
unter /usr/local/bin/.Erstelle service-file mit folgenden Inhalt unter: /etc/systemd/system/ibm-sw-tpm2.service
[Unit]
Description=IBM Software TPM2
[Service]
Type=simple
ExecStart=/usr/bin/tpm_server
WorkingDirectory=/var/lib/tpm_server
Restart=always
RestartSec=5s
[Install]
WantedBy=multi-user.target
Installiere und starte TPM
pacman -Sy ibm-sw-tpm2 tpm2-abrmd
mkdir /var/lib/tpm_server
systemctl enable --now ibm-sw-tpm2
Für die Benutzung des virtuellen TPM durch mehrere Prozesse / Threads muss der AccessBroker folgend angepasst werden:
systemctl edit tpm2-abrmd
[Unit]
ConditionPathExistsGlob=
[Service]
ExecStart=
ExecStart=/usr/bin/tpm2-abrmd --tcti=mssim
Nun kann auch der gestartet werden und zum Bootvorgang hinzugefügt:
systemctl enable --now tpm2-abrmd
Example to add attester public key into verifier_exporter database
sqlite3 verifier.db "update attesters set public_key=x'DBA74546118988FD3791CCB8BCA1791131717F1B1EACAF29CBD799C178EA6EF6594654D8C0A07A21DDD9269177ED1F0B9165CAA85E703DEA0A20F7840FE57944E75602D6833FFFFCCEF3F0D1E865A1DA4D2736AED351EF3660FF8CC7DE86BC0BEC8867DD16E6BFA0EFB071C4F23B8DE9E1775662C1A8F83758DAB2C919428EE1' where address='[::1]:30271';"