2021-11-23 16:16:53 +01:00
|
|
|
--- a/vsock_proxy/service/nitro-enclaves-vsock-proxy.service
|
|
|
|
|
+++ b/vsock_proxy/service/nitro-enclaves-vsock-proxy.service
|
|
|
|
|
@@ -8,11 +8,12 @@ Type=simple
|
|
|
|
|
StandardOutput=journal
|
|
|
|
|
StandardError=journal
|
|
|
|
|
SyslogIdentifier=vsock-proxy
|
2021-11-24 14:23:53 +01:00
|
|
|
+Environment=VSOCK_PROXY_CONFIG=/usr/share/nitro_enclaves/vsock-proxy.yaml
|
2021-11-23 16:16:53 +01:00
|
|
|
ExecStart=/bin/bash -ce "TOKEN=$(curl --silent -X PUT \"http://169.254.169.254/latest/api/token\" -H \"X-aws-ec2-metadata-token-ttl-seconds: 21600\") ; \
|
|
|
|
|
REGION=$(curl --silent -H \"X-aws-ec2-metadata-token: $TOKEN\" http://169.254.169.254/latest/dynamic/instance-identity/document | jq -r .region) ; \
|
|
|
|
|
[ -z \"$REGION\" ] && REGION=$(curl --silent http://169.254.169.254/latest/dynamic/instance-identity/document | jq -r .region) ; \
|
|
|
|
|
exec /usr/bin/vsock-proxy 8000 kms.$${REGION}.amazonaws.com 443 \
|
|
|
|
|
- --config /etc/nitro_enclaves/vsock-proxy.yaml"
|
2021-11-23 17:31:04 +01:00
|
|
|
+ --config $VSOCK_PROXY_CONFIG"
|
2021-11-23 16:16:53 +01:00
|
|
|
Restart=always
|
|
|
|
|
TimeoutSec=0
|
|
|
|
|
|
