4 ms·
Once it's networked you lose the "whitelist of systemd services" and it's then no different from any networked secret store.
by lmz 6mo ago
Once it's networked you lose the "whitelist of systemd services" and it's then no different from any networked secret store.
- otabdeveloper4 6mo agoNo, this is a solved problem: https://spiffe.io/ https://spiffe.io/ You can do service attestation securely, even for networked services.
- burnished 6mo agoNice. Really grateful for your participation in this comment tree