clevis-rs

This crate is an implementation of the clevis client to the Tang protocol used for generating encryption keys.

This project is NOT officially associated with Latchset, publisher of Clevis and Tang.

This crate is a work in progress.

See the documentation for further information: https://docs.rs/clevis.

Tang Setup

You need a tang server running in order to use this crate. The padhihomelab/tang image is the easiest way to get started with this.

docker run --rm -d \
    -v $(pwd)/tang-db:/db \
    -e ENABLE_IPv6=1 \
    -p 11697:8080 \
    --name tang-backend \
    padhihomelab/tang

This will store the Tang keys in the directory at ./tang-db, adjust this as needed.

Any port can be selected (this crate uses 11697 for examples since it is the ASCII of ta (as in tang), so easy to remember).

Since this project takes heavy influence from the original clevis, it retains the GPLv3 license.