integrate cosign signature verification feature into enclave-cc about enclave-cc HOT 8 CLOSED

@hairongchen

dependencies:

I'd suggest if we want to track these "todo" items in issues, we edit the first comment in the issue. It becomes much easier to find the status

from enclave-cc.

ongoing quick start guide review: confidential-containers/documentation#65

from enclave-cc.

ongoing quick start guide review: confidential-containers/documentation#65

This pr may not be merged for some reason. If this doc was placed somewhere else, I'd like to leave the new link.

from enclave-cc.

image singing doc PR: confidential-containers/guest-components#87
cosign feature doc: https://github.com/confidential-containers/image-rs/tree/main/src/signature/mechanism/cosign

from enclave-cc.

integration POC done in development env: now can load encrypted and cosign signed image docker.io/eqmcc/helloworld_enc:latest after retrieving signature validation and layer decryption resources from newest version of verdictd

from enclave-cc.

@hairongchen do you feel this is on track to converge to the V0.3.0 release (22nd of January)?

from enclave-cc.

@hairongchen do you feel this is on track to converge to the V0.3.0 release (22nd of January)?

Yes, its on track, thanks!

from enclave-cc.

closed - all dependencies meet and e2e test works as expected

from enclave-cc.