Management of building of software packages using a trusted execution environment
AssigneeRed Hat, Inc.
InventorsAxel Simon, Michael Hingston McLaughlin Bursell
Life of this patent
Estimating the term…
Abstract
Systems and methods providing a processing device to receive, by a software build process executing in a trusted execution environment (TEE) of a first computer system, software source code from a second computer system. The processing device generates a software package by compiling the software source code. The processing device also generates a first signature of the software package and sends the first signature to the second computer system. Responsive to receiving, from the second computer system, a second signature comprising the first signature signed by the second computer system, the processing device further deploys the software package on the first computer system.
Claims20
A method comprising:
- receiving, by a software build process executing in a trusted execution environment (TEE) of a first computer system, software source code from a second computer system;
- generating, by the software build process, a software package by compiling the software source code;
- generating a first signature of the software package;
- sending the first signature to the second computer system;
- and
- responsive to receiving, from the second computer system, a second signature comprising the first signature signed by the second computer system, deploying the software package on the first computer system.
A system comprising:
- a memory;
- and
- a processing device operatively coupled to the memory, wherein the processing device is further to:
- receive, by a software build process executing in a trusted execution environment (TEE) of a first computer system, a software source code from a second computer system;
- generate a software package by compiling the software source code;
- generate a first signature of the software package;
- sign the first signature using a self-signed certificate of the first computer system to generate a second signature;
- send the second signature to the second computer system;
- and
- responsive to receiving, from the second computer system, a third signature comprising the second signature signed by the second computer system, deploying the software package on the first computer system.
A non-transitory computer-readable storage medium comprising executable instructions that, when executed by a processing device, cause the processing device to:
- receive, at a software build process executing in a trusted execution environment (TEE) of a first computer system, software source code from a second computer system;
- generate a software package by compiling the software source code;
- generate a first signature of the software package;
- send the first signature to the second computer system;
- and
- responsive to receiving, from the second computer system, a second signature comprising the first signature signed by the second computer system, deploy the software package on the first computer system.
Dependencies are inferred from the claim text.