Meeting minutes - August 15, 2024

[jraman567]

Dionna

• I will continue my talks with distros on how they want to provide a good measured boot story. I've already shared a doc with Canonical and SUSE about this https://docs.google.com/document/d/1CtTRqkF6M1XHl6_QknQJVzU3k7uBm0kUsve7tO5le-U/edit?tab=t.0#heading=h.wwvn00vu8yj5
• I will ask AMD to register a media type with the IANA for the ATTESTATION_REPORT.
• I can ask Intel's TDX team (probably Jun Nakamura) to register a media type with the IANA for the TDQUOTE.
• I will write up a draft for the evidence collection composition API once Thomas has the agent API draft ready. Likely REST function will be --function, GET parameters will be eponymous and if binary expected to be paths to files containing the binary contents, and POST parameters we can discuss if they're needed. I just want to avoid any parsing requirements outside of standard flag support libraries.

Thomas

• Thomas owns the agent API and will fill that out more for content negotiation.
• Thomas will figure out the RISC-V story?
• If the project is hosted under the Veraison umbrella/org, we'd package thos request up with the more general inquiry about rel-engineering & security escalation support from the CCC

Tom & Jag

• Explore dependencies, language options and release infrastructure service dependencies