initial tpm broker

2026-06-28 10:33:14 +00:00
parent 3bcf16e384
commit 9e1dbd3ef7
17 changed files with 1584 additions and 19 deletions
@@ -0,0 +1,8 @@
+// fleet-enrol-broker — TPM identity enrolment broker.
+// See docs/tpm-enrolment-design.md. Stdlib only (no external modules) so the
+// container build is trivially reproducible and the system's one UNAUTHENTICATED
+// edge carries a minimal dependency surface. step-ca signing is done by shelling
+// out to the bundled `step` CLI, not a Go dependency.
+module fleet-enrol-broker
+
+go 1.22