Skip to content

Commit

Permalink
feat(sgx): update sgx-guest.docker.manifest.template
Browse files Browse the repository at this point in the history
Add mount info for /proc/self/mountinfo and /proc/self/cgroup, and /sys/fs/cgroup/ to the allowed files in the sgx-guest.docker.manifest.template file. Also, increase the maximum threads to 512.
  • Loading branch information
johntaiko committed Sep 30, 2024
1 parent b0a779f commit cfcd960
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion provers/sgx/config/sgx-guest.docker.manifest.template
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,9 @@ fs.mounts = [
]
sgx.allowed_files = [
"file:/root/.config/raiko/config",
"file:/proc/self/mountinfo",
"file:/proc/self/cgroup",
"file:/sys/fs/cgroup/",
]
sgx.debug = false
sgx.edmm_enable = {{ 'true' if env.get('EDMM', '1') == '1' else 'false' }}
Expand All @@ -37,7 +40,7 @@ sgx.trusted_files = [
"file:/usr/lib/ssl/certs/",
"file:sgx-guest",
]
sgx.max_threads = 32
sgx.max_threads = 512
sgx.remote_attestation = "dcap"
sys.enable_extra_runtime_domain_names_conf = true
sys.insecure__allow_eventfd = true
Expand Down

0 comments on commit cfcd960

Please sign in to comment.