openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File imadata.spec of Package imadata

#
# spec file for package imadata
#
# Copyright (c) 2022 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via https://bugs.opensuse.org/
#

Name:           imadata
Version:        0.1.0+git.1646917795.30d3027
Release:        0
Summary:        Adds IMA hash metadata into repomd
License:        GPL-3.0-only
Group:          Development/Libraries/Python
URL:            https://github.com/aplanas/imadata
Source:         %{name}-%{version}.tar.gz
Requires:       python3-rpm
BuildArch:      noarch

%description

This tool will add a new metadata file, imadata.xml, in a repository
of type repomd.  This metadata will enumerate all the files for all
the packages, and register the SHA256 hash for those files.

This hash can be used in contexts where an IMA, Integrity Measurement
Archiveture, hash is required, like for example in remote attestation.
In those cases we want to have the list of hashes of files that
compose a system, but without a direct inspection on it.

Downloading this new repository metadata will provide a secure channel
to deploy the hashes of installer system, and validate them when a
remote attestation service is running.

%prep
%setup -q

%build

%install
mkdir -p %{buildroot}%{_bindir}
install -m 0755 %{name}.py %{buildroot}%{_bindir}/%{name}

%files
%{_bindir}/%{name}

%changelog

Places

File imadata.spec of Package imadata

Places