The 'atticd' service has been deleted from the sgx-nixos configuration. Additionally, the reference to 'atticd.nix' has been removed from the 'default.nix' imports. This was done to help streamline the system configuration.
This commit removes a predefined TCP port (8080) from the allowed list in the networking firewall. This choice will increase the security features by avoiding any unnecessary open ports in the firewall configuration.
The import statement for the atticd.nix file has been commented out in the default.nix file under the sgx-nixos system. This reflects changes in dependencies or system configurations.
This commit changes the default retention period for garbage collection in the attic daemon setting from 30 days to 3 months. This will allow the system to maintain data for a longer period before cleaning.
This commit introduces a new parameter for setting the garbage collection interval in the atticd.nix file. The garbage collection interval is set to run every 30 days, helping to manage unnecessary data and improve system performance.
The atticd settings in systems/x86_64-linux/sgx-nixos have been updated to include an API endpoint. The primary purpose of this change is to ensure that atticd infrastructure can successfully connect to the new endpoint at https://attic.teepot.org.
The attic-client has been added to the packages for the x86_64-linux system. This change enables interaction with the Attic distributed storage system, expanding the capabilities of this system setting.
This commit allows TCP traffic on port 8080 and permits ICMP echo requests for ping command in SGX-NixOS. Moreover, the necessary code adjustments have been made in the default.nix file.
This commit includes the atticd service to the sgx-nixos system. The `atticd.nix` file has been added with default configuration and the attic service has been included in imports in `default.nix`. Modifications were made in `flake.nix` and `flake.lock` to integrate attic dependencies.
This commit moves the kernel package version override from the base nixos service to specific system configurations. Now, the latest linux packages will be used only in the system configurations where the override has been explicitly added. This approach gives us more flexibility to handle different kernel package versions for different systems.
An extra comma is added to the pccs_url in the sgx_default_qcnl.conf file to correct a possible syntax error. This fix ensures the correct parsing of the JSON object.
Harald Hoyer