Leonard Foerster

There is some things to tidy up for the parts we set for our kernel configs: - [x] Usage of `CONFIG_FOO=n` instead of `# CONFIG_FOO is not set` to deactivate...

**Description of changes:** Update kernels to latest AL kernels available in the repositories. **Testing done:** Validate basic functionality through sonobuoy quick test: ``` > kubectl get nodes -o wide NAME...

kernel: Chart out future for kmod-kit

1

kmod-kit currently does not support cross compiling external kmods for other architectures, like we do for our general package builds. If we do not want to build kmods on the...

For signing enclave images `nitro-cli` supports signatures using ECDSA as supported by COSE Sign1 (described in the [RFC8152](https://datatracker.ietf.org/doc/html/rfc8152#section-8.1)). The implementation for that is in https://github.com/awslabs/aws-nitro-enclaves-cose When using other key types...

**Issue #, if available:** - **Description of changes:** ``` tests: Create x509 certificate chains on the fly for testing We have been using a set of fixed certificate chaines for...