Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft: TUF find new, v2 #1165

Closed
wants to merge 20 commits into from

Conversation

RebeccaMahany
Copy link
Contributor

@RebeccaMahany RebeccaMahany commented Apr 28, 2023

Relates to #954.

This is the next step toward using our new TUF infrastructure: a new implementation of findNew that looks at our new update library.

Future work + linked PRs

Subsequent PRs will tackle the following (order is not set in stone):

  1. Point to release file <binary>/<os>/<arch>/<channel>/release.json, once available
  2. Trigger a reload/restart after a successful update; launcher init performs version selection using the new update library (potentially falling back to findNew); launcher performs library tidying after version selection
  3. Other improvements/refactors (ship a more up-to-date TUF repo, maybe split library parts of autoupdate/tuf out into its own package)
  4. An "update now" functionality tied to control server
  5. Eventually removing the old notary autoupdater

Previous work:

  1. Run new TUF autoupdater side-by-side with notary autoupdater #1081
  2. Expose data and metrics about new TUF autoupdater #1103
  3. Point to production TUF infra #1108
  4. Perform retry on TUF update #1110
  5. Add library manager to handle TUF downloads #1111
  6. Small autoupdate improvements #1119
  7. Pass knapsack in to tuf autoupdater to simplify configuration #1168
  8. [TUF autoupdater] Remove osquery client dependency #1178

@RebeccaMahany
Copy link
Contributor Author

Closing in favor of #1185

@RebeccaMahany RebeccaMahany deleted the becca/tuf-find-new-v2 branch May 8, 2023 15:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant