Harald Hoyer
fa4178ac6b
fix(gramine): add build system python packages
...
to let gramine find the correct python libdir path
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-12-10 09:42:41 +01:00
Harald Hoyer
07130f5c39
chore: remove already upstreamed protobufc
...
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-12-09 16:18:41 +01:00
Harald Hoyer
50f3adc1c6
feat(gramine): v1.7 -> v1.8
...
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-11-12 17:28:54 +01:00
Harald Hoyer
41b3543753
feat: sgx-2.25 dcap-1.22
...
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-10-15 08:30:27 +02:00
Harald Hoyer
1e8c8ed1c7
refactor: replace mkSGXContainer with sgxGramineContainer
...
- Deprecate `mkSGXContainer` in favor of `sgxGramineContainer`.
- Update references to use the new container creation function.
- Streamline the codebase by simplifying `overlays/libTee/default.nix`.
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-08-08 14:34:34 +02:00
Harald Hoyer
7eb96bec6a
fix(gramine): maybe fix problem with golang netpollBreak
...
Old golang uses pipes for netpoll. And occasionally -EACCES was seen
with golang `netpollBreak` writing to a non-blocking pipe.
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-08-08 14:18:43 +02:00
Harald Hoyer
2d39aee8b4
feat: use overlay to specify mkSGXContainer
...
will simplify `pkgs.callPackage lib.nixsgx.mkSGXContainer`
to `nixsgxLib.mkSGXContainer`.
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-07-01 16:06:23 +02:00
Harald Hoyer
971e63784c
chore: Migrate from cachix to Attic in nix and github workflows
...
- Updated nix config to use Attic substituter and trusted public key
- Modified github workflows to use Attic cache instead of Cachix
- Removed the now unnecessary cachix config settings and Cachix workflow actions
- Update `flake.lock`
- Run on our own CI runners
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-07-01 14:00:14 +02:00
Harald Hoyer
83f9cc24ee
feat: rename manifest and sigs to app
by default via appName
parameter
...
This will ease the creation of scripts processing containers further.
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-26 12:26:40 +02:00
Harald Hoyer
18963c7e6b
feat: gramine 1.7
...
This release supports eventfd, so the patched `libuv` can be omitted.
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-14 14:27:06 +02:00
Harald Hoyer
ea5b94f682
chore: update to nixos 24.05
...
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-06 13:57:02 +02:00
Harald Hoyer
d2b836216b
feat: add mkSGXContainer
nix function
...
to build SGX container in one go.
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-06-05 13:53:22 +02:00
Harald Hoyer
46ccd164d1
chore: sgx-dcap: 1.20 -> 1.21
...
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-05-17 12:17:32 +02:00
Harald Hoyer
e9a6d7a4dc
chore: sgx-sdk: 2.23 -> 2.24
...
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-05-17 12:17:31 +02:00
Harald Hoyer
802aca6e67
feat: sgx-dcap.default_qpl config file
...
works now out of the box without a PCCS server and API token.
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-03-22 14:07:49 +01:00
Harald Hoyer
7afe2bbed7
fix: build nodejs with overwrite*
...
and don't copy the rest of the build scripts
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-03-22 13:39:15 +01:00
Harald Hoyer
4617b69a45
chore: remove package all
...
use nixci
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-03-22 13:39:14 +01:00
Harald Hoyer
e1116e9487
chore: flake.lock update and libuv fix
...
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-03-22 13:38:36 +01:00
Harald Hoyer
795851e244
feat: add sgx-dcap.pck_id_retrieval_tool
...
for `PCKIDRetrievalTool`
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-03-13 15:25:49 +01:00
Harald Hoyer
1054e3dbe4
feat: initial commit
...
Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
2024-02-07 11:25:05 +01:00