### OOM - Onap Operations Manager will deploy this as part of CA service ### two stages ### Stage 1 - Initialize TPM and exit (init.sh script is used for this case) ### Stage 2 - Starts the abrmd process and keeps it running to provide the ### means for application to interact wit TPM (run_abrmd.sh is used) ### Make a directory /tmp/volume (mkdir -p /tmp/volume) on the Host ### This directory (Sample Shared volume ABRMD_DATA) is mounted to abrmd ### container and is mounted as /tmp/files/ inside container ### the host's name "TPM_NODE_NAME" environmental variable ### The input to this container is srkhandle(a file/environmental vatiable) ### tpm_status.yaml (TPM State) password (for TPM Primary key, ### password is encrypted using pgp and is extracted using the passphrase ### (provided in shared volume)) ### Output of this container is the public ### portion of the TPM's Primary key (out_parent_public) and the staus will ### be updated in the tpm_status.yaml file ### Input ### 1.srkhandle 2.password 3.passphrase 4.tpm_status.yaml ### Output ### 1. out_parent_public ### Building Docker Images ``` $ docker build -t -f dockerfile . ``` ### Running ABRMD Container with Simulator ``` $ docker run -d --privileged -v /tmp/run/dbus:/var/run/dbus -v /tmp/volume:/tmp/files --name ``` ### Running ABRMD Container with TPM Hardware ``` $ docker run -d --privileged -device=/dev/tpm0 -v /tmp/run/dbus:/var/run/dbus -v /tmp/volume:/tmp/files --name ``` ##### Sanity Check Run the following command in the tools container to see if everything is setup correctly: ``` tpm2_listpcrs ```