nitro-enclaves-vsock-proxy.service
OBS-URL: https://build.opensuse.org/package/show/Cloud:Tools/aws-nitro-enclaves-cli?expand=0&rev=5
This commit is contained in:
parent
1e644ab00b
commit
4b62ae6a08
@ -37,3 +37,19 @@
|
||||
die_on(chdir("/rootfs") != 0, "chdir /rootfs");
|
||||
die_on(chroot("/rootfs") != 0, "chroot /rootfs");
|
||||
|
||||
--- a/vsock_proxy/service/nitro-enclaves-vsock-proxy.service
|
||||
+++ b/vsock_proxy/service/nitro-enclaves-vsock-proxy.service
|
||||
@@ -8,11 +8,12 @@ Type=simple
|
||||
StandardOutput=journal
|
||||
StandardError=journal
|
||||
SyslogIdentifier=vsock-proxy
|
||||
+Environment=VSOCK_PROXY_YAML=/etc/nitro_enclaves/vsock-proxy.yaml
|
||||
ExecStart=/bin/bash -ce "TOKEN=$(curl --silent -X PUT \"http://169.254.169.254/latest/api/token\" -H \"X-aws-ec2-metadata-token-ttl-seconds: 21600\") ; \
|
||||
REGION=$(curl --silent -H \"X-aws-ec2-metadata-token: $TOKEN\" http://169.254.169.254/latest/dynamic/instance-identity/document | jq -r .region) ; \
|
||||
[ -z \"$REGION\" ] && REGION=$(curl --silent http://169.254.169.254/latest/dynamic/instance-identity/document | jq -r .region) ; \
|
||||
exec /usr/bin/vsock-proxy 8000 kms.$${REGION}.amazonaws.com 443 \
|
||||
- --config /etc/nitro_enclaves/vsock-proxy.yaml"
|
||||
+ --config $VSOCK_PROXY_YAML"
|
||||
Restart=always
|
||||
TimeoutSec=0
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user