Keystone

Public apt archive. Install the daemon on an ABOX or other Ubuntu host. Source stays in the private keystone repo.

Current package

keystone 0.1.2 · amd64 · suite stable

Install

  1. Add the archive (once per machine). 
    sudo mkdir -p /etc/apt/keyrings
curl -fsSL https://autrio10x.github.io/apt-edge-rt/keystone.gpg \
  | sudo tee /etc/apt/keyrings/keystone.gpg >/dev/null
echo "deb [signed-by=/etc/apt/keyrings/keystone.gpg] https://autrio10x.github.io/apt-edge-rt stable main" \
  | sudo tee /etc/apt/sources.list.d/keystone.list
  2. Install the package. On an ABOX-5210G with a TPM the vault is tpm2. If that TPM device is missing, install fails. 
    sudo apt update
sudo apt install keystone
  3. Fill identity, then start. Leave this file empty and the service will restart in a loop. 
    sudo nano /etc/keystone/keystone.toml
sudo systemctl enable --now keystone
keystone status

Identity file

Ops supplies these four values. They are not in the package.

autrio_url = "…"
tenant_key = "…"
serial = "…"
birth_secret = "…"

Check

keystone --version
keystone status

keystone status should show layout: package, running: yes, and on an ABOX keystore: tpm2.

Upgrade

sudo apt update
sudo apt install --only-upgrade keystone

The identity file is kept.