Skip to content

Commit

Permalink
fix(teepot-vault-unseal-sgx): pass CA_CERT_FILE
Browse files Browse the repository at this point in the history
Although the file was included, it was not in the standard location.
Passing the absolute path fixes the issue.

The CA file is needed for the raft join command.

Signed-off-by: Harald Hoyer <harald@matterlabs.dev>
  • Loading branch information
haraldh committed Aug 7, 2024
1 parent 42aa0ed commit 3644998
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions packages/container-vault-unseal-sgx-azure/default.nix
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,7 @@ nixsgxLib.mkSGXContainer {
VAULT_AUTH_TEE_SHA256_FILE = "${vat.vault-auth-tee.sha}/share/vault-auth-tee.sha256";
### TODO: remove hardcoded version ###
VAULT_AUTH_TEE_VERSION = "0.1.0+dev";
CA_CERT_FILE = "${teepot.container-vault-start-config}/opt/vault/cacert.pem";
};
};

Expand Down

0 comments on commit 3644998

Please sign in to comment.