Consider just-in-time fetching

Open
  • Is something wrong?
#149 1 comment 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
5/5
Estimated time
Over a week
Newbie friendliness
35/100
Issue type
Feature
Clarity
Needs clarification
Activity status
Quiet
Tech stack
rust
Domain
security

Research direction

Start by reading the current upki behavior for container images, filter updates, and revocation checks; the issue does not name files, tests, or entry points. Compare the proposed base filter set and asynchronous just-in-time fetching with environments lacking an init process, then clarify the desired mode and its acceptance criteria before implementation.

Written by the indexing model from the issue text.

Description

In our meeting today we discussed whether/how upki could be used in container images where size is important.

  • Should a base set of filters be shipped as part of an image?
  • Could we do something to ensure that filters are updated over time in environments where there's no init process to trigger timely updates?
    • Should there be a mode where upki revocation checks go out and (asynchronously) fetch if necessary?
    • A downstream container image could run for a while, so just leaving it with its starter set seems suboptimal (if strictly better than without any upki)

@jnsgruk does this capture your thoughts/goals/concerns?

Dominant language
Rust
Stars
181
Forks
14
Avg merge
14h 16m
Merged PRs (30d)
21

Getting set up

This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from rustls/upki

All issues in rustls/upki

Similar issues

More Rust issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.