add boot transparency support#6

Open

danbia wants to merge 66 commits intousbarmory:developmentfrom

danbia:boot-transparency

Collaborator

danbia commented Dec 9, 2025

Enable interaction with the transparency ecosystem for boot loading operation using the boot-transparency Go library functions.


          add boot transparency support

b2dbdbf

danbia requested a review from abarisani

December 9, 2025 23:15

danbia added 2 commits

December 10, 2025 00:22


          update documentation

d31a7ff


          tyding

2f42c9d

abarisani reviewed

View reviewed changes

Makefile Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

README.md Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

cmd/linux.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

cmd/linux.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

danbia added 3 commits

December 10, 2025 14:31


          address PR comments


          replace online/offline nomenclature

bd2b1ed


          move back transparency code to a dedicated pkg, add btCmd under cmd/a…

40b0cbd

…uth.go, cleanup cmd/linux.go

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani reviewed

View reviewed changes

transparency/transparency.go Outdated Show resolved Hide resolved

abarisani mentioned this pull request

Replace os.PathSeparator as needed in UEFI fs.FS implementation. #9

Closed

Contributor

abarisani commented Jan 13, 2026

To address #9 the patch should always honor forward slashes when constructing paths for fs.FS and os.PathSeparator for any eventual pkg honoring os (e.g. filepath).

abarisani reviewed

View reviewed changes

transparency/config.go Outdated

+              // Boot transparency configuration root directory and filenames.
+              const (
+              	transparencyRoot = `/transparency`

Contributor

abarisani Jan 13, 2026 •

edited

Loading

As this is used only once in the code, it feels up to the caller rather than being hard coded here (hashPrefix or similar?). Also, what is the purpose of the leading /?

As this package has expectations on the file names to load these constants should probably be exported for documentation.

Collaborator Author

danbia Mar 12, 2026

fixed exporting PathPrefix in commit 775721ef12ab7e2bc0e9ab1a1275fb29c358fa5f

Collaborator Author

danbia Mar 12, 2026

fix improved in commit 4b863291cddcf240ef025f133e478cf7cec27209

danbia added 27 commits

January 15, 2026 13:57


          tyding

7a0b4ed


          function renaming hasValidHash -> validHash

107027d


          makes engine a Config property and align the codebase to the latest b…

…oot-transparency


          improves error messages

5ead986


          revert cmd/auth.go

82b9a5b


          move hash validation function comment

2146afe


          fix error detection boot_entry test

a79b5a8


          updates SetKey to use []byte as argument

a26554b


          improve comments on config key fields

a771b1a


          improve comments and error messages

a69663b


          uses fmt.Errorf instead of errors.New as fmt is already imported

bba9774


          more idomatic error check

7f3e20c


          improves error checks

03b54ae


          change Status code resolution function name Resove -> String

74c8947


          simplifies error message on bt validation

2e16529


          change Hash(*[]byte) (string) -> Sum(b []byte) ([]byte)

cccd427


          align test files to Sum()

cbc5c14


          uses artifact.Sum() and artifact.HashSize const from boot-transparenc…

a83ab5a

…y library


          moves artifact hash verification to boot-transparency library

766688e


          Merge branch 'development' into boot-transparency

3f6cef2


          update dependencies

447c09d


          replace UEFI specific loading code

a9a68ea


          tyding

83d80ce


          exports PathPrefix to allow configuring the asset store directory

775721e


          expand testcases

9d9e1f8


          removes Metadata from BootArtifact until they will be fully supported

e5f5144


          exports default path prefix

4b86329

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet