diff --git a/systems/x86_64-linux/sgx/default.nix b/systems/x86_64-linux/sgx/default.nix index bfffeb8..198d928 100644 --- a/systems/x86_64-linux/sgx/default.nix +++ b/systems/x86_64-linux/sgx/default.nix @@ -33,7 +33,17 @@ in security.tpm2.enable = false; security.tpm2.abrmd.enable = false; - # services.aesmd.enable = true; + services.aesmd = { + enable = true; + quoteProviderLibrary = pkgs.nixsgx.sgx-dcap.default_qpl; + }; + systemd.services.aesmd = { + environment.LD_LIBRARY_PATH = lib.mkForce (lib.makeLibraryPath [ pkgs.nixsgx.sgx-dcap.default_qpl pkgs.curl.out ]); + serviceConfig.BindReadOnlyPaths = [ + "/etc/sgx_default_qcnl.conf" + ]; + }; + services.pcscd.enable = true; powerManagement.cpuFreqGovernor = "ondemand";