Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
61 commits
Select commit Hold shift + click to select a range
243c5bf
crypto: Make pkey_pub_from_pem and rsa_oaep_encrypt public
ansasaki Feb 17, 2026
11525dd
chore: workspace and CI updates
ansasaki Aug 3, 2026
74e6693
keylimectl: Add crate scaffold with config, error handling, and output
ansasaki Aug 3, 2026
789c402
keylimectl: Add HTTP client base module
ansasaki Aug 3, 2026
9b26b67
keylimectl: Add service client implementations
ansasaki Aug 3, 2026
a0a6c5e
keylimectl: Add agent command implementations
ansasaki Aug 3, 2026
444521c
keylimectl: Add runtime policy command implementations
ansasaki Aug 3, 2026
6399239
keylimectl: Add measured boot commands and wire up command dispatch
ansasaki Aug 3, 2026
bc8f7a2
keylimectl: Make TLS hostname verification configurable and enforce T…
ansasaki Feb 17, 2026
98d04a7
keylimectl: add api-v2/api-v3 feature flags and gate v2-only modules
ansasaki Feb 17, 2026
3355691
keylimectl: Gate verifier methods behind v2/v3 feature flags
ansasaki Feb 17, 2026
ba8daed
keylimectl: add test matrix for api-v2/api-v3 feature combinations
ansasaki Feb 17, 2026
366c8b8
keylimectl: gate registrar version detection behind feature flags
ansasaki Feb 18, 2026
01fe453
keylimectl: Add negative security tests
ansasaki Feb 18, 2026
518484a
keylimectl: Make push model default with auto-detection
ansasaki Feb 18, 2026
18cbab6
keylimectl: Add configuration and usability features
ansasaki Feb 18, 2026
a20a2d1
keylimectl: Add diagnostics with info command
ansasaki Feb 18, 2026
7674d22
keylimectl: Make policy a module with new CLI subcommands
ansasaki Feb 18, 2026
f51775c
keylimectl: add runtime, measured boot, and TPM policy schema types
ansasaki Feb 18, 2026
e310acd
keylimectl: Implement legacy policy format conversion
ansasaki Feb 18, 2026
889863a
keylimectl: implement IMA log parsing and runtime policy generation
ansasaki Feb 18, 2026
10c90c3
keylimectl: Add filesystem scanning and policy merging
ansasaki Feb 18, 2026
18abe1b
keylimectl: Add privilege detection utility with sudo suggestion
ansasaki Feb 19, 2026
060c770
keylimectl: implement DSSE policy signing and signature verification
ansasaki Feb 18, 2026
9774b6e
keylimectl: Implement policy validation
ansasaki Feb 18, 2026
9a3c023
keylimectl: Implement one-shot evidence verification via verifier
ansasaki Feb 18, 2026
1f6142f
keylimectl: Implement measured boot and TPM policy generation
ansasaki Feb 18, 2026
64593bd
keylimectl: Add integration tests
ansasaki Feb 18, 2026
16d268c
keylimectl: extract kernel, bootloader, MOK, and vendor_db from event…
ansasaki Feb 19, 2026
17bb0f5
keylimectl: implement TPM PCR reading behind a feature flag
ansasaki Feb 19, 2026
3161ee5
keylimectl: Implement initramfs extraction for --ramdisk-dir
ansasaki Feb 19, 2026
777c91d
keylimectl: implement policy generation from RPM repo
ansasaki Feb 19, 2026
2e9eff3
keylimectl: Add integration tests for privileged operations
ansasaki Feb 19, 2026
16bb745
keylimectl: In agent list, rename --registrar-only to --registrar
ansasaki Feb 24, 2026
00fee07
keylimectl: use attestation_status field for --wait-for-attestation p…
ansasaki Feb 24, 2026
3e3c7d0
keylimectl: use correct TPM algorithm names in pull model enrollment
ansasaki Feb 24, 2026
9e0c729
keylimectl: use agent mTLS cert from registrar
ansasaki Feb 25, 2026
ea281fc
keylimectl: Add progress spinners and optional color output
ansasaki Feb 24, 2026
e7c1cf5
keylimectl: simplify flags for agent status and remove
ansasaki Feb 25, 2026
3092653
keylimectl: add interactive runtime policy wizard
ansasaki Feb 27, 2026
335b6ef
keylimectl: add interactive measured boot policy wizard
ansasaki Feb 27, 2026
8cc5ead
keylimectl: add interactive TPM policy wizard
ansasaki Feb 27, 2026
2df259c
keylimectl: add interactive evidence verification wizard
ansasaki Feb 27, 2026
712a5af
keylimectl: add default skip paths and parallel filesystem scanning
ansasaki Feb 27, 2026
eedfb91
keylimectl: auto-enable TPM policy PCRs and require attestation policy
ansasaki Mar 4, 2026
86720f8
keylimectl: Use correct variant for UEFI log parse failures
ansasaki Mar 9, 2026
e8e57ec
keylimectl: verify GPG signature of RPM repository metadata
ansasaki Jun 2, 2026
59aaec2
keylimectl: add keylimectl to GNUmakefile and RPM packaging
ansasaki Jun 16, 2026
f6ee29f
keylimectl: gate feature-specific CLI args behind #[cfg]
ansasaki Jun 17, 2026
a506cf8
keylimectl: include HTTP status code in verifier delete response
ansasaki Jun 26, 2026
de29bd9
keylimectl: fix agent update race condition (409 Conflict)
ansasaki Jun 26, 2026
61b2d16
keylimectl: use integer (major, minor) tuples for API version comparison
ansasaki Jun 26, 2026
cd11fc9
keylimectl: fix missing name attribute in v3 policy API requests
ansasaki Jun 30, 2026
6ff197c
keylimectl: remove unused dead code from the codebase
ansasaki Jul 24, 2026
3c2eae0
keylimectl: extract shared DigestMap and merge_digest_maps to policy_…
ansasaki Jul 24, 2026
7d81194
Fix clippy needless_late_init warnings
ansasaki Sep 3, 2026
dadd34b
keylimectl: make accepted TPM algorithms configurable
ansasaki Sep 4, 2026
001ecfe
keylimectl: return non-zero exit code on validation/verification failure
ansasaki Sep 8, 2026
5638a08
keylimectl: exit non-zero on partial failures in agent status
ansasaki Sep 8, 2026
140209a
keylimectl: fix misleading "Failed to list" error for client creation…
ansasaki Sep 8, 2026
f97615e
keylimectl: support ECDSA and traditional RSA keys for mTLS
ansasaki Sep 8, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
40 changes: 40 additions & 0 deletions .github/workflows/rust.yml
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@ on:

env:
CARGO_TERM_COLOR: always
RUSTFLAGS: "-D warnings"

jobs:
static:
Expand All @@ -21,6 +22,45 @@ jobs:
- name: Check for panics
run: ./tests/nopanic.ci

keylimectl-features:
name: keylimectl feature flags (${{ matrix.features }})
runs-on: ubuntu-latest
container:
image: quay.io/keylime/keylime-ci:latest
strategy:
fail-fast: false
matrix:
features:
- "api-v2,api-v3"
- "api-v2"
- "api-v3"
steps:
- uses: actions/checkout@v7
- name: Set git safe.directory for the working directory
run: git config --system --add safe.directory "$PWD"
- name: Build
run: cargo build -p keylimectl --no-default-features --features "${{ matrix.features }}"
- name: Test
run: cargo test -p keylimectl --no-default-features --features "${{ matrix.features }}"
- name: Clippy
run: cargo clippy -p keylimectl --all-targets --no-default-features --features "${{ matrix.features }}" -- -D clippy::all

keylimectl-no-features:
name: keylimectl compile_error guard
runs-on: ubuntu-latest
container:
image: quay.io/keylime/keylime-ci:latest
steps:
- uses: actions/checkout@v7
- name: Set git safe.directory for the working directory
run: git config --system --add safe.directory "$PWD"
- name: Verify compile_error triggers with no features
run: |
if cargo build -p keylimectl --no-default-features 2>&1; then
echo "ERROR: Build should have failed with no features enabled"
exit 1
fi

tests:
name: Fedora tests
runs-on: ubuntu-latest
Expand Down
Loading
Loading