mirror of
https://github.com/matter-labs/teepot.git
synced 2025-07-21 07:03:56 +02:00
91f1612e0f
* create containers with nix * updated README.md * added SPDX license headers Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
29 lines
665 B
Nix
29 lines
665 B
Nix
# SPDX-License-Identifier: Apache-2.0
|
|
# Copyright (c) 2024 Matter Labs
|
|
|
|
# TODO: This derivation is a temporary workaround for
|
|
# creating a self-signed certificate for Vault and the unseal TEE.
|
|
# It will be replaced with real RA-TLS.
|
|
{ lib
|
|
, stdenv
|
|
}:
|
|
stdenv.mkDerivation rec {
|
|
name = "container-vault-start-config";
|
|
src = with lib.fileset; toSource {
|
|
root = ./.;
|
|
fileset = unions [
|
|
./cacert.pem
|
|
./cakey.pem
|
|
./config.hcl
|
|
];
|
|
};
|
|
|
|
phases = "installPhase";
|
|
postInstall = ''
|
|
mkdir -p $out/opt/vault
|
|
cp -r $src/* $out/opt/vault
|
|
|
|
mkdir -p $out/etc
|
|
printf "precedence ::ffff:0:0/96 100\n" > $out/etc/gai.conf
|
|
'';
|
|
}
|