/docs/latest/security/ Recent content in Security on Flatcar Container Linux Hugo en-us Copyright © The Flatcar Project Contributors. Copyright © Flatcar a Series of LF Projects, LLC. For website terms of use, trademark policy and other project policies please see <a href="https://lfprojects.org/policies/">lfprojects.org/policies</a>. /docs/latest/security/constants-and-ids/ Mon, 01 Jan 0001 00:00:00 +0000 /docs/latest/security/constants-and-ids/ <p>This document contains well-known constants and IDs used by Flatcar Container Linux.</p> <h2 id="omaha-application-id">Omaha application ID</h2> <p>This UUID is used to identify Container Linux to the update service, i.e. as an <code>appid</code> over the <a href="https://github.com/google/omaha/" target="_blank" rel="noopener">Omaha protocol</a> .</p> <table> <thead> <tr> <th>Label</th> <th>Value</th> <th>Notes</th> </tr> </thead> <tbody> <tr> <td>Container Linux</td> <td><code>e96281a6-d1af-4bde-9a0a-97b76e56dc57</code></td> <td>-</td> </tr> </tbody> </table> <h2 id="gpt-partition-types">GPT partition types</h2> <p>These GUIDs are dedicated <a href="https://en.wikipedia.org/wiki/GUID_Partition_Table#Partition_type_GUIDs" target="_blank" rel="noopener">GPT partition types</a> for specific Container Linux usages.</p> <table> <thead> <tr> <th>Label</th> <th>Value</th> <th>Notes</th> </tr> </thead> <tbody> <tr> <td><code>coreos-usr</code></td> <td><code>5dfbf5f4-2848-4bac-aa5e-0d9a20b745a6</code></td> <td>Alias for historical <code>coreos-rootfs</code>, currently used for <code>/usr</code> only</td> </tr> <tr> <td><code>coreos-resize</code></td> <td><code>3884dd41-8582-4404-b9a8-e9b84f2df50e</code></td> <td>Support for auto-resizing via <code>extend-filesystems</code>, current default type for <code>/</code></td> </tr> <tr> <td><code>coreos-reserved</code></td> <td><code>c95dc21a-df0e-4340-8d7b-26cbfa9a03e0</code></td> <td>Reserved for OEM usage, support for customizations via <code>OEM-CONFIG</code> partition</td> </tr> <tr> <td><code>coreos-root-raid</code></td> <td><code>be9067b9-ea49-4f15-b4f6-f36f8c9e1818</code></td> <td>RAID partition containing a rootfs, see <a href="/docs/latest/os-config/storage/raid/">notes</a> for details and limitations</td> </tr> </tbody> </table> <p>For more information on the partitioning scheme used by Flatcar Container Linux, read the <a href="/docs/latest/devguide/sdk-disk-partitions/">disk layout</a> documentation.</p> /docs/latest/security/supply-chain/ Mon, 01 Jan 0001 00:00:00 +0000 /docs/latest/security/supply-chain/ <h3 id="flatcar-container-linux-supply-chain-security-and-slsa">Flatcar Container Linux Supply Chain Security and SLSA</h3> <p>The <a href="https://slsa.dev/" target="_blank" rel="noopener">Supply Chain Levels for Software Artifacts</a> (SLSA or &lsquo;salsa&rsquo; for short) industry standard defines a checklist of standards and controls to prevent tampering, improve integrity, and secure packages and infrastructure in software projects. This document describes the Flatcar Container Linux project&rsquo;s current and planned compliance with the <a href="https://slsa.dev/spec/v0.1/requirements" target="_blank" rel="noopener">requirements of SLSA</a> and provides a deep dive into the processes and mechanisms to secure the Flatcar project supply chain.</p>