fix: update the common cacert and include it in the unseal container

The previous cacert expired. A new one was created and also included in the unseal container.

The path to access the cacert was fixed in the unseal app and made configurable via an environment variable.
This commit is contained in:
Harald Hoyer 2024-07-03 11:23:54 +02:00
parent e3feac1cc3
commit f1b8a48a6a
Signed by: harald
GPG key ID: F519A1143B3FBE32
5 changed files with 38 additions and 17 deletions

View file

@ -12,6 +12,7 @@ nixsgxLib.mkSGXContainer {
inherit tag isAzure;
packages = [
teepot.container-vault-start-config
vat.vault-auth-tee.sha
teepot.teepot.tee_vault_unseal
];