intel / ccc-linux-guest-hardening

Linux Security Hardening for Confidential Compute
https://intel.github.io/ccc-linux-guest-hardening-docs
MIT License
65 stars 13 forks source link

deploy: source kafl env vars #31

Closed Wenzel closed 1 year ago

Wenzel commented 1 year ago

This PR is based on https://github.com/IntelLabs/kAFL/pull/110

It's sourcing the kafl's env.sh instead of recreating it from scratch, and overriding one variable: KAFL_CONFIG_FILE

il-steffen commented 1 year ago

I tired to test this but it does not pull in the upstream kAFL PR. But the generated env.sh looks good otherwise.

You also changed the BKC_ROOT (like we discussed), but I think we want to merge that separately since it also requires updating all of the bkc/ scripts in the same go. It is just a cosmetic change - we can fix it after we're done with the other pipeline rework.