using insecure PCCS_URL via docker env

edgelesssys / edgelessdb

EdgelessDB is a MySQL-compatible database for confidential computing. It runs entirely inside a secure enclave and comes with advanced features for collaboration, recovery, and access control.

https://edgeless.systems/products/edgelessdb

GNU General Public License v2.0

170 stars 17 forks source link

using insecure PCCS_URL via docker env #107

Closed aep closed 2 years ago

aep commented 2 years ago

i'd like to be able to launch the edb containers unmodified on kraud.cloud , but due to the nature of not being Azure, we don't support the azure endpoints. edb works fine with the intel reference dcap when setting PCCS_URL, so would it be viable to allow setting the PCCS_URL as a docker environment variable?

aep commented 2 years ago

err sorry i did mean "use_secure_cert". PCCS_URL already does the right thing but expects the tls ca to be already inside the container.

aep commented 2 years ago

looks like that's what it already does. "SGX_QL_NO_PLATFORM_CERT_DATA" is a totally different error than the one i got from the failed tls cert, so i need to look elsewhere. sorry for the noise.