From 68956ad1270511953e841c162867cd511b82c89c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fabiano=20Fid=C3=AAncio?= Date: Tue, 1 Nov 2022 14:32:57 +0100 Subject: [PATCH] osbuilder: Add /etc/tdx-attest.conf when using eaa_kbc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit First of all, EAA KBC is only used with TDX, thus we can safely assume that eaa_kbc means TDX, at least for now. A `/etc/tdx-attest.conf` file, with the data "port=4050" is needed as that's the default configuration for the Quote Generation Service (QGS) which is present on the guest side. Signed-off-by: Fabiano Fidêncio --- tools/osbuilder/rootfs-builder/ubuntu/rootfs_lib.sh | 2 ++ 1 file changed, 2 insertions(+) diff --git a/tools/osbuilder/rootfs-builder/ubuntu/rootfs_lib.sh b/tools/osbuilder/rootfs-builder/ubuntu/rootfs_lib.sh index d9a08b754a..6c47b41fc5 100644 --- a/tools/osbuilder/rootfs-builder/ubuntu/rootfs_lib.sh +++ b/tools/osbuilder/rootfs-builder/ubuntu/rootfs_lib.sh @@ -47,6 +47,8 @@ echo 'deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu focal m echo 'deb [arch=amd64] http://mirrors.openanolis.cn/inclavare-containers/ubuntu${VERSION_ID} focal main' | tee /etc/apt/sources.list.d/inclavare-containers.list apt-get update apt-get install -y rats-tls-tdx + +echo 'port=4050' | tee /etc/tdx-attest.conf EOF else echo "rats-tls-tdx is only provided for Ubuntu 20.04, there's yet no packages for Ubuntu ${VERSION_ID}"