Automated remote attestation for Linux machines with TPM 2.0.
or just get started…
One CLI for your whole fleet. Manage from your laptop or enroll a Linux machine directly.
The first half adds our Cloudsmith package repo and signing key. Installation is done by apt / dnf, which verify the package signature.
Read it first — setup.deb.sh · setup.rpm.sh — or add the repo yourself:
curl -1sLf https://dl.cloudsmith.io/public/ratatouille/ratatouille/gpg.61A0D0C2DBB16F5E.key \ | gpg --dearmor | sudo tee /usr/share/keyrings/ratatouille-archive-keyring.gpg > /dev/null echo "deb [signed-by=/usr/share/keyrings/ratatouille-archive-keyring.gpg] \ https://dl.cloudsmith.io/public/ratatouille/ratatouille/deb/ubuntu $(. /etc/os-release && echo $VERSION_CODENAME) main" \ | sudo tee /etc/apt/sources.list.d/ratatouille.list sudo apt update && sudo apt install rat
Fedora / RHEL: config.rpm.txt. Packages are signed with key 61A0D0C2DBB16F5E.
Keylime and Sigstore are powerful attestation tools for Linux when used with TPM 2.0, IETF RATS, and proper CI/CD workflows. But deploying them means managing a registrar, a verifier, TPM-backed agent authentication, TPM quote schemas, IMA allowlists, and policy fan-out.
Ratatouille handles all of it. Generate a policy from a known-good machine, push it to Git, and every enrolled machine is continuously attested against it.
The cryptographic evidence is yours: exportable, independently verifiable, and not locked in our dashboard.
Ratatouille operationalizes proven open-source components. Your policies, your evidence, your cryptographic chain are all verifiable with standard tooling whether or not Ratatouille exists.
Install the Ratatouille agent on a device in a known-good state.
Policy is built from IMA logs of modules and executables loaded since boot.
Sign the policy and push to Git. Ratatouille reads and verifies the policy signature and fans it out to your devices.
At a chosen interval, Ratatouille evaluates a TPM quote over IMA log entries against your policy.
Pull a signed evidence package at any time in a format any auditor can verify independently.
From the chip the manufacturer burned a key into, through to the relying party's access decision. You don't have to trust Ratatouille. You can verify each link yourself.
rat evidenceBoth run the same pipeline. Tell us about your environment and we'll help you deploy.
Hands-on walkthrough: enroll a real machine against our shared demo core, break attestation on purpose, and watch it recover — about 15 minutes. Needs a Linux box with TPM 2.0 (a cloud VM with a vTPM works).