kairos
kairos copied to clipboard
[factory web ui] Trusted boot system extensions
Allow to build system extensions together with the generated image
This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.
It should not be only about "trusted boot". We should allow the users to create system extensions that don't need signing. Currently we only document the process with the use of keys here: https://kairos.io/docs/advanced/sys-extensions/#building-system-extensions-from-a-docker-image-with-auroraboot
but we should allow building them with not keys provided. Then we can expose that process in the web UI.
Also, we can allow the users to generate the keys from the web UI or let the operator (the persona spinning up the Web UI) point to a directory with existing keys. The web UI can have a switch "sign with keys" when there are keys available or not sign at all.
Created a ticket for the key generation: https://github.com/kairos-io/kairos/issues/3661