Andrew Randall

[RFE] Check whether Inspektor Gadget works on Mariner

9

## Current situation Mariner is not an officially supported target platform and I don't know if it works. ## Impact Users running Mariner are unsure whether they can run IG....

Calico node check includes false negatives for modern Linux distros

6

## Expected Behavior Expect Calico node check to not return an error if the OS supports all the features it needs. ## Current Behavior calicoctl node checksystem fails ipt_set, xt_icmp,...

Propose Flatcar for Incubation

8

Signed-off-by: Andrew Randall

[RFE] full-disk encryption leveraging systemd-cryptsetup and TPM

12

## Current situation Flatcar doesn't currently support full-disk encryption AFAIK. ## Impact 1) Without disk encryption Flatcar systems might not pass some security audit / certification requirements. 2) Potential attack...

Improve text on Packer

3

In a call with Adobe folks (@mtougeron and @sfotony) it was noted that the docs text[1] on use of Packer was quite scary, so they haven't used it yet (but...

[RFE] investigate remote attestation using TPM (consider Keylime)

5

## Current situation Most servers ship with a TPM module that can be leveraged to verify (remotely attest) system integrity. Flatcar doesn't currently do so. CoreOS used to have a...