Verifiable End To End Secure OCI Native Machines - Serge Hallyn & Joy Latten, Cisco
Channel: The Linux Foundation
Date: 2023-05-25

Verifiable End To End Secure OCI Native Machines - Serge Hallyn & Joy Latten, Cisco

How do you know the workload you've started really is running what you intended? This talk will present "project machine" - an end to end secure toolchain utilizing secure build, storage, distribution, and execution of container images, machine images, and machines, all using signed OCI images. Combining existing tools like cosign, dmverity, stacker and zot with new tools and concepts, project machine provides the following guarantees about a running host. First: if anything in firmware, shim, kernel, or the host or container filesystems, or host configuration has been modified, boot will not proceed. Second: if the firmware or UKI (kernel and initrd) have been tampered with, the host's LUKS keys and provisioned private (SUDI) key cannot be leaked. And third, building upon the previous: when beginning to communicate with a host, you can verify that the software stack it booted was the one you signed. Most of the new (and existing) pieces of this have been in internal use for some time. However the complete open source implementation, to which existing users will eventually move, is still under development. Therefore feedback from the community will be tremendously helpful.