oak

oak copied to clipboard

Remote Attestation Refactoring

2

There's some opportunity for refactoring our remote attestation implementation, this issue is meant to track aspects that could be improved. It's worth noting that we currently support remote attestation over...

jul-sh

At the moment the WasmState object is also the import resolver. This means we first have to create the `WasmState` instance without a module instance (`None`) to be able to...

conradgrobler

In #2579 the mutexes from `std` are replaced with spinlocks due to the current switch to UEFI. But when an OS is available, we can do something smarter than spinlocks....

kccqzy

https://github.com/oconnor663/duct.rs It looks like it may simplify slightly some of the logic related to creating commands and spawning tasks in the background.

tiziano88

Context: https://github.com/project-oak/oak/pull/2621#discussion_r829594646. We currently send only status codes, not error messages. It would be nice to send descriptive error messages, without leaking sensitive data.

jul-sh

Currently we assume sudoless Docker for convenience, but that is actually discouraged. We should either support running scripts with explicit sudo, or install Docker in [rootless mode](https://docs.docker.com/engine/security/rootless/).

tiziano88

After #2591, write a custom test runner for our Wasm modules. Resources: - [Testing strategy for wasm32](https://github.com/rustwasm/team/issues/173)

mariaschett

Move the `LogError` trait from `oak_utils` to `oak_functions_logger` crate

1

The `oak_utils` crate contains code generation utilities, so it intended to be used as a build-time-only depenndency. The `LogError` trait is used at runtime so should be moved to another...

conradgrobler

After https://github.com/project-oak/oak/pull/2575 is done, we need to add a new CI check that runs the `lookup_data_generator` and verifies the output with the `lookup_data_checker`.

ipetr0v

The current documentation explains how to run an existing example, but does not explain how the various components of the example is used (e.g. the `module` directory, `example.toml` and `config.toml`)...

conradgrobler