From b4092023bf65ea5109f820e5eef582978c23b6e1 Mon Sep 17 00:00:00 2001
From: Biao Lu <biao.lu@intel.com>
Date: Thu, 17 Aug 2023 17:07:48 +0800
Subject: [PATCH] osbuilder: add confidential-data-hub in rootfs

Fixes: #7544

Signed-off-by: Biao Lu <biao.lu@intel.com>
---
 tools/osbuilder/rootfs-builder/rootfs.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/tools/osbuilder/rootfs-builder/rootfs.sh b/tools/osbuilder/rootfs-builder/rootfs.sh
index 538df325ce..127f37dafa 100755
--- a/tools/osbuilder/rootfs-builder/rootfs.sh
+++ b/tools/osbuilder/rootfs-builder/rootfs.sh
@@ -30,6 +30,7 @@ LIBC=${LIBC:-musl}
 SECCOMP=${SECCOMP:-"yes"}
 # The kata agent enables sealed-secret feature.
 SEALED_SECRET=${SEALED_SECRET:-"no"}
+CDH_RESOURCE_PROVIDER=${CDH_RESOURCE_PROVIDER:-"kbs"}
 SELINUX=${SELINUX:-"no"}
 
 lib_file="${script_dir}/../scripts/lib.sh"
@@ -699,6 +700,11 @@ EOF
 		make KBC=${AA_KBC} ttrpc=true
 		make install DESTDIR="${ROOTFS_DIR}/usr/local/bin/"
 		popd
+
+		pushd guest-components/confidential-data-hub
+		make RESOURCE_PROVIDER=${CDH_RESOURCE_PROVIDER}
+		make install DESTDIR="${ROOTFS_DIR}/usr/local/bin/"
+		popd
 	fi
 
 	if [ "${KATA_BUILD_CC}" == "yes" ]; then