Veraison Mentorship: Harmonizing Open-Source Verifiers with RATS Standards

[Salkimmich]

Veraison Mentorship: Harmonizing Open-Source Verifiers with RATS Standards

This issue provides a brief description of the Linux Foundation Mentorship opportunity for Islet. This Issue is for potential mentees and project mentors to review and discuss.

Description:

Align Verifiers with the RATS model by defining evidence formats and attestation results, working toward integration with other projects like Keylime. Participants will work on adopting CMW for Evidence and EAT for Attestation Results.

Expected Outcome:

Deliver standardized evidence formats and adoption paths for open-source Verifiers, facilitating seamless integration with the RATS architecture.

Recommended Skills:

Familiarity with RATS architecture, attestation workflows, and policy management. Knowledge of TPM evidence formats is beneficial.

Mentor(s):

Thore (@THS-on, [email protected])
Thomas (@thomas-fossati, [email protected])

Process Notes for Prospect Mentees

The Mentorship programme is scheduled to run from January to April 2025 and should last 12 weeks, in total.

We have some flexibility to adjust the start date within that time frame.

We will try to decide by mid-January 2025 based on the candidatures we receive in the meantime and the subsequent interview round.

The deadline for sending your candidature (including a short resume) is the 10th of January 2025.

For questions and clarifications, join the dedicated Zulip channel.

👋

[dcmiddle]

Interested candidates can read this to get a good enough understanding of Remote ATtestation procedureS (RATS) Architecture:
https://github.com/CCC-Attestation/rats-cheatsheet?tab=readme-ov-file#rats-cheat-sheet

[ggold7046]

Hi All, what is the last date of application and when could we hear about the selected candidates results ?

[Shruti78]

interested in contributing towards your project.

[iolivergithub]

Count me in --- maybe just as an observer at the moment. I'll see if I can get any of my students involved

[riaankleinhans]

The application for this Mentorship can be done through the LFX portal here:
https://mentorship.lfx.linuxfoundation.org/project/a3b8d4a8-0651-4059-b100-bcd0ea46b21e

[thomas-fossati]

Interested candidates, mentors and observers -- @iolivergithub I am looking at you ;-) -- can join the dedicated Zulip channel.

[THS-on]

WIP document on how Keylime maps RATS can be found here: https://github.com/THS-on/keylime/blob/rats/docs/design/keylime_rats.rst

[Eeshu-Yadav]

@thomas-fossati thanks for adding a particular discussion on the zulip regarding the LFX mentorship.

[thomas-fossati]

I have just edited the issue to add a "Process Notes for Prospect Mentees" section.

[Rohanraj123]

Hey @THS-on and @thomas-fossati I would love to contribute to the project because I liked the project's idea and I have good understanding of RATS Arch and also have proficiency in golang. I applied to the project in LFX. Looking forward to work on this project.

[ojuschugh1]

Hi @thomas-fossati @THS-on

Thank you for sharing the invite and reading material. I would love to contribute and look forward to collaborating.

Thanks and regards,
Ojus Chugh

[yashkmankad]

Thank you everyone for your interest in this Mentorship opportunity.

As @riaankleinhans mentioned earlier, interested applicants can apply on the LFX Mentorship portal here:
https://mentorship.lfx.linuxfoundation.org/project/a3b8d4a8-0651-4059-b100-bcd0ea46b21e

For those who've already applied, we expect the mentors to reach out and start the interviews shortly.

For any application or logistics-related question around the mentorship, and to hear about additional mentorship opportunities for CCC projects in 2025, please join the #mentorship_program channel on the CCC slack: slack.confidentialcomputing.io

[AashifAmeer]

I am willing to contribute to this project.

[Arpita34]

i am interested in contributing to this project.

[THS-on]

For everyone that is interested please send an application via the LFX portal, you only have today left to send us an application.

[Akhilesh-max]

Hi @THS-on LFX portal is still open for this project. Shall I apply, or is it late?
Thanks!

[THS-on]

@Akhilesh-max the application deadline already passed on 10.1 AoE, so it's unfortunately too late.