Andre Russ

introduce an "unsupported" flag

5

there should be a constant monitoring of the state of garden linux and its primary use case: to run kubernetes with gardener. so e.g. if there are states (e.g. loaded...

status check if in a healthy kubernetes cluster

3

if we are NOT on a healthy registered node we should start e.g. ssh otherwise not. Before we can implement this logic we need a way to check if we...

The resulting images are vulnerability and compliance scanned in the unit tests (directly on build) and in integration tests (possible release candidates). This needs to be proper documented (nice enhancement...

physical arm box to boot with: - [ ] #878 - [x] #879 - [ ] #880 - [ ] #881 - [ ] #882 - [ ] #883 -...

docker base image targets

2

build-deb -> debian package builder base image (e.g buildessentials devscripts debhelper ... with dev user ) build-kernel -> builder for kernel images (what do i need to build nvidia packages...

there is a 3 level test framework - unit tests - integration tests - conformance tests that need to be proper documented

oci supports now oci artifacts: - originally in oci you could only publish layers each layer was a tar containing the data of the relevant option (nginx consited of the...

there was a #839 CIS feature implementation that is similar organised like the sap hardening guideline: - all SAP specific requirements should go into an SAP feature - the SAP...

for security reasons we should consolidate the signing to a single container. this container should be the only one that has access to our private keys there is an example...

Flags Garden Linux should issue in various situations

1

fips active mode enabled needs upgrade needs restarts needs reboot attestation possible (tpm) secure booted