Security Device Onboard - Stage 1 - 2023-08-09


Completed by:Ā  Randy Templeton, Intel Corporation

Submitted to TAC Mail List:Ā  2023/08/09

Presented on TAC Weekly Call: Ā 2023/08/09 (Meeting Recording)




Below is a self-assessment submitted by TSC Chair/Maintainers of the Project. Comments/questions/feedback is welcome either a) in the Comments at the bottom of the page or b) during the TAC call when information is presented

Stage 1: At Large ProjectsĀ 

Stage 2 and Stage 3 Projects also requested to complete this section, as PLD acceptance criteria requires meeting current as well as prior stage requirements

Stage 1 Criteria (from the PLD)

Meets / Needs Improvement / Missing / Not Applicable

Supporting Data (if needed, include links to specific examples)

Stage 1 Criteria (from the PLD)

Meets / Needs Improvement / Missing / Not Applicable

Supporting Data (if needed, include links to specific examples)

2 TAC Sponsors, if identified (Sponsors help mentor projects) - See full definition onĀ Project Stages: Definitions and Expectations

Meets

Joe Pearson

Nick Haunschild

The typical IP Policy for Projects under the LF Edge Foundation is Apache 2.0 for Code Contributions, Developer Certificate of Origin (DCO) for new inbound contributions, and Creative Commons Attribution 4.0 International License for Documentation. Projects under outside licenses may still submit for consideration, subject to review/approval of the TAC and Board.

Meets

Apache 2.0 -Ā Contributing

Upon acceptance, At Large projects must list their status prominently on website/readme

Meets

https://www.lfedge.org/projects/fidodeviceonboard/

Agenda-Current and Upcoming

Meeting notes



Stage 1 Projects, please skip to Additional Information Requested from All Projects

Stage 2: Growth Stage

Stage 3 Projects also requested to complete this section

Stage 2 Criteria (from the PLD)

Meets / Needs Improvement / Missing / Not Applicable

Supporting Data (if needed, include links to specific examples)

Stage 2 Criteria (from the PLD)

Meets / Needs Improvement / Missing / Not Applicable

Supporting Data (if needed, include links to specific examples)

Development of a growth plan (to include both roadmap of projected feature sets as well as overall community growth/project maturity), to be done in conjunction with their project mentor(s) at the TAC.

Meets

https://lf-lfedge.atlassian.net/wiki/pages/viewpage.action?pageId=14586823

Document that it is being used in POCs.

Meets

https://lf-lfedge.atlassian.net/wiki/display/SDO/Project+Documentation

Releases

FDO integration with Intel Bare Metal Onboard solution

https://www.intel.com/content/www/us/en/download/728218/785592/fido-device-onboard-fdo-with-bare-metal-onboard.html

Demonstrate a substantial ongoing flow of commits and merged contributions.

Meets

https://github.com/fido-device-onboard/pri-fidoiot/pulse

Demonstrate that the current level of community participation is sufficient to meet the goals outlined in the growth plan.

Meets

https://github.com/fido-device-onboard/pri-fidoiot/network/members

Red Hat https://github.com/romfreiman

Portainer.io https://github.com/portainer

Waterloo https://github.com/Awbmilne

Intel https://fdorv.com

Demonstrate that the current level of community participation is sufficient to meet the goals outlined in the growth plan.

Meets

https://github.com/fido-device-onboard/pri-fidoiot/network/members

Red Hat https://github.com/romfreiman

Portainer.io https://github.com/portainer



Waterloo https://github.com/Awbmilne

Demonstrate evidence of, or a plan for, interoperability, compatibility or extension to other LF Edge Projects. Examples may include demonstrating modularity (ability to swap in components between projects).

Meets

Interop with Open Horizons, Example

https://open-horizon.github.io/docs/installing/fdo/#fdo-overview



Stage 2 Projects, please skip to Additional Information Requested from All Projects

Additional Information Requested from All Projects

Additional Information Requested from All Projects

Supporting Data (if needed, include links to specific examples)

Additional Information Requested from All Projects

Supporting Data (if needed, include links to specific examples)

Intention for the upcoming year (Remain at current stage OR advance towards the next Stage)

Towards Stage 3

Include a link to your projectā€™s LFX Insights page. We will be looking for signs of consistent or increasing contribution activity. Please feel free to add commentary to add color to the numbers and graphs we will see on Insights.

https://insights.lfx.linuxfoundation.org/projects/lfedge%2Fsecuredeviceonboard/dashboard;subTab=technical

How many maintainers do you have, and which organizations are they from? (Feel free to link to an existing MAINTAINERS file if appropriate.)

9, Intel Corp.

What do you know about adoption, and how has this changed since your last review / since you joined the current Stage? If you can list companies that are end users of your project, please do so. (Feel free to link to an existing ADOPTERS file if appropriate.)

Red Hat Enterprise Linux 9, 8.6

Portainer.io in both CE (Community Edition) and BE (Business Edition)

SUSE Linux Enterprise Micro 5.2

IBM has gone live with both Open Horizon and IEAM (commercial version) with FDO.Ā 

How has the project performed against its goals since the last review? (We won't penalize you if your goals changed for good reasons.)

Customers (e.g. Advantech) and Intel are adapting FDO

IBM has gone live with both Open Horizon and IEAM (commercial version) with FDO.Ā 

More customers close to going live.Ā 

What are the current goals of the project? For example, are you working on major new features? Or are you concentrating on adoption or documentation?

Enhancing community engagementĀ  and customer adoption while creating new features for customer adoption

How can LF Edge help you achieve your upcoming goals?

Establish FDO as leading Edge onboarding solution with in the community

Do you think that your project meets the criteria for the next Stage?

Yes

Please summarize Outreach Activities in which the Project has participated in (e.g. Participation in conferences, seminars, speaking engagements, meetups, etc.)

Fido Interop event (September/October)

Are you leveraging theĀ Technical Project Getting Started Checklist? If yes, please provide link (if publicly available).

LF Edge Checklist for FIDO Device Onboard

Please review, and update if needed, your Project entry on the Existing Project Taxonomy page, modifying the Last Updated / Reviewed date in the header.

Needs to be updated

Please share a LFX security report for your project in the last 30 days

Intel as internal process/tools similar to LFX Security