github.com/blixtra/rkt@v0.8.1-0.20160204105720-ab0d1add1a43/Documentation/devel/tpm.md (about)

     1  # rkt and the Trusted Platform Module
     2  
     3  rkt supports *measuring* container state and configuration into the Trusted Platform Module (TPM) event log. Enable this functionality by building rkt with the [`--enable-tpm=yes` option to `./configure`][build-configure-tpm]. rkt accesses the TPM via the [`tpmd` executable available from the go-tspi project][go-tspi]. This `tpmd` is expected to listen on port 12041.
     4  
     5  Events are logged to PCR 15, with event type `0x1000`. Each event contains the following data:
     6  
     7  1. The hash of the container root filesystem
     8  2. The hash of the contents of the container manifest data
     9  3. The hash of the arguments passed to `stage1`
    10  
    11  This provides a cryptographically verifiable audit log of the containers executed on a node, including the configuration of each.
    12  
    13  
    14  [build-configure-tpm]: build-configure.md#security
    15  [go-tspi]: https://github.com/coreos/go-tspi