harald/nixsgx
1
0
Fork 0
mirror of https://github.com/matter-labs/nixsgx.git synced 2025-07-21 07:33:55 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix: get rid of /dev/ in containers

Browse source 
`enableFakechroot = true` somehow triggered the inclusion of `/dev`.

Some fake chroots included `/dev/kvm` with different permissions,
so the produced container was not the same.

As this fake chroot is not needed anymore with using `--chroot` for `gramine-sgx-sign`,
it can be turned off.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
This commit is contained in:
Harald Hoyer 2024-07-02 12:12:22 +02:00
parent 4a6aff1d2e
commit 9a35ad60ad
Signed by: harald
GPG key ID: F519A1143B3FBE32
1 changed files with 0 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
overlays/nixsgxLib/default.nix
View file

@ -211,7 +211,6 @@ final: _:
inherit fromImage; inherit fromImage;
includeStorePaths = false; includeStorePaths = false;
enableFakechroot = true;
extraCommands = (mkNixStore contents) + '' extraCommands = (mkNixStore contents) + ''
( (
set -e set -e