eden
eden copied to clipboard
Add virtualization workflow with no TPM
We want to test deploying container-in-VM to a device without TPM. In the past we had some bug merged because this was not tested. Also, it is better to use string attributes for workflow matrix, even for the boolean tpm option.
Then instead of workflow names:
eden-report-smoke.tests.txt-tpm-true-ext4
eden-report-smoke.tests.txt-tpm-false-zfs
We get somewhat more readable:
eden-report-smoke.tests.txt-tpm-ext4
eden-report-smoke.tests.txt-no-tpm-zfs
I'm open for one-word suggestions to replace "no-tpm". What EVE uses when TPM is not available? Golang crypto library? Should we call it "gocrypto"? I don't know.
Names of artifacts are not what I have hoped for, moving to draft..
What EVE uses when TPM is not available? Golang crypto library? Should we call it "gocrypto"? I don't know.
TPM is used to store some private keys (device key, encryption key) and vault AES key, TPM is very slow and we are not using TPM for crypto operation (we do, but only in one case and that is encrypt/decrypt vault backup key that comes from the cloud and that happens very infrequently). If no TPM available, the aforementioned keys are stored as plain text and vault encryption is disabled.
I think tpm and no-tpm is descriptive enough.