harald/nixcfg
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sgx: factor out aesmd

Browse source 
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
This commit is contained in:
Harald Hoyer 2024-03-20 16:53:28 +01:00
parent 0b9fb35062
commit f1899875ce
3 changed files with 45 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

12
systems/x86_64-linux/sgx/default.nix
View file

@ -14,6 +14,7 @@ in
gui.enable = false;
nix-ld.enable = true;
nix.enable = true;
aesmd_dcap.enable = true;
pccs.enable = true;
pccs.secret = config.sops.secrets.pccs.path;
podman.enable = true;
@ -33,17 +34,6 @@ in
security.tpm2.enable = false;
security.tpm2.abrmd.enable = false;
services.aesmd = {
enable = true;
quoteProviderLibrary = pkgs.nixsgx.sgx-dcap.default_qpl;
};
systemd.services.aesmd = {
environment.LD_LIBRARY_PATH = lib.mkForce (lib.makeLibraryPath [ pkgs.nixsgx.sgx-dcap.default_qpl pkgs.curl.out ]);
serviceConfig.BindReadOnlyPaths = [
"/etc/sgx_default_qcnl.conf"
];
};
services.pcscd.enable = true;
powerManagement.cpuFreqGovernor = "ondemand";