search

confidential-containers / trustee-operator

Operator to manage the lifecycle of Trustee (KBS)
Apache License 2.0
3 stars 18 forks source link

Add option to provide TDX specific configuration #17

Closed bpradipt closed 4 months ago

bpradipt commented 7 months ago

For TDX an additional configuration (sgx_default_qcnl.conf) may be required for the AS service.

An example to patch the operator deployment is shown in the following readme

This issue is to track the work to integrate this additional configuration on the operator side

cc @fidencio @mythi @lmilleri

lmilleri commented 6 months ago

Can anyone point me to the AS code that is using the sgx_default_qcnl.conf configuration?

mythi commented 6 months ago

It's not in the AS code but deeper in the SGX/TDX DCAP quoteverify libs. This is the parser afaui https://github.com/intel/SGXDataCenterAttestationPrimitives/blob/main/QuoteGeneration/qcnl/linux/qcnl_config_impl.cpp

lmilleri commented 4 months ago

Added configmap for overriding the sgx_default_qcnl.conf configuration