3 Commits

Author SHA1 Message Date
Tim Jones
e732d90618
feat: support acm for secureboot
Add support for using AWS Certificate Manager to store the SecureBoot
cert.

Signed-off-by: Tim Jones <tim.jones@siderolabs.com>
2026-01-21 21:13:38 +01:00
Thomas Gosteli
3e35f91894
feat(secureboot): implement reading key material from AWS KMS
The Talos imager already implements reading Secure Boot key material from AWS KMS. This change adds the missing flags
to the image-factory and wires them to the Secure Boot service

Signed-off-by: Thomas Gosteli <thomas.gosteli@protonmail.ch>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-07-04 20:40:45 +04:00
Andrey Smirnov
84113ca06a
feat: implement SecureBoot asset generation
Fixes #19

Using Talos implementation of custom SecureBoot signers, provide full
implementation of SecureBoot assets signed either by static local PKI or
Azure Key Vault reference.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2023-11-30 14:32:00 +04:00