Harald Hoyer
c0991dbdd1
feat: add virtualization config to x86_64-linux system
...
This commit introduces virtualization configurations for docker and libvirtd in the x86_64-linux system. It also sets the podman.dockerCompat to false to avoid compatibility issues.
2024-04-11 10:48:50 +02:00
Harald Hoyer
f9d045b883
Update SGX hardware configuration
...
This commit updates the hardware configuration for SGX systems. We have configured the available kernel modules list to include TPM-related modules. Also, unnecessary TPM2 security settings have been removed to clean up the configuration file.
2024-04-10 22:18:56 +02:00
Harald Hoyer
e9034a7711
sgx: Disable Docker and enable Podman Docker compatibility
...
Docker has been disabled, with the Podman Docker compatibility feature being enabled instead to ensure system virtualization.
2024-04-10 22:13:19 +02:00
Harald Hoyer
d5287f242e
Enable TPM2 security in x86_64-linux SGX hardware configuration
...
The commit turns on the TPM2 security feature and its associated Access Broker and Resource Manager daemon (abrmd) in the hardware configuration for the x86_64-linux SGX system. This action, represented by changing the respective entries from false to true, enhances the security of this system configuration.
2024-04-10 22:10:34 +02:00
Harald Hoyer
4066b0cd80
sgx: unsgx and prevent sleep on lid close
...
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-04-10 21:46:05 +02:00
Harald Hoyer
7d0cf0ac60
sgx: set disks idle
...
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-04-10 21:45:22 +02:00
Harald Hoyer
969d86d932
flake update
...
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-04-10 21:45:02 +02:00
Harald Hoyer
30e7082344
sgx
...
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-04-10 17:43:39 +02:00
Harald Hoyer
bcbd179bf2
nix: set TMPDIR to /var/tmp
...
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-28 10:30:42 +01:00
Harald Hoyer
21e1464534
remove ~/.cargo/bin path
...
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-26 09:51:09 +01:00
Harald Hoyer
30754f5211
different fish exec workaround
...
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-25 11:40:05 +01:00
Harald Hoyer
d94278f8ac
flake update
...
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-25 11:39:54 +01:00
Harald Hoyer
1ebef44098
nix: turn off relaxed sandbox mode
...
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-22 22:30:14 +01:00
Harald Hoyer
af17fbbfe6
mx: add timer for blog rendering
...
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 23:40:25 +01:00
Harald Hoyer
946f44ee51
sgx: don't use pccs
...
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 21:23:02 +01:00
Harald Hoyer
ad2fc117c7
fish: add missing exec
...
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 21:17:20 +01:00
Harald Hoyer
bfeb26c5e0
sgx-nixos: add podman
...
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 16:52:35 +01:00
Harald Hoyer
f8ebc5d553
gitignore result
...
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2024-03-21 15:24:51 +01:00
Harald Hoyer
f4e2368893
A new start
2024-03-21 15:00:36 +01:00
Harald Hoyer