Introduce the Device Manufacturing Database, and private key extraction support #80
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Additionally, expand the annotations extracted from the metadata JSON file, capturing devices not supported - but worth identifying for failure cases.
roliver-rpi
reviewed
Nov 19, 2024
This can be done by setting RPI_DEVICE_RETRIEVE_KEYPAIR inside your configuration file, and can _only_ be performed immediately after the key has been written during provisioning. Any subsequent reboot will prevent retrieval without modifying the OS.
tdewey-rpi
force-pushed
the
dev/tdewey/device-db-and-pkeys
branch
from
165680d to
cf093ff
Compare
|
Hi @tdewey-rpi , the branch has been force-pushed but Github doesn't seem to have updated the PR for some reason? |
roliver-rpi
reviewed
Nov 21, 2024
Fixup automatic unmounting - a module insertion race would cause problems in the previous version.
|
Confirmed in testing that this does the right thing, provided you've read the docs. I will explore sqlite3 as a backing store for other state, too. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Introduce support for a CSV device manufacturing database, and support for extracting device private keys as part of initial manufacturing to support device RMA and recovery scenarios.
Fixes #77
Fixes #79