steveej/infra
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

Merge branch 'pr/nuc-sgx-permissions' into 'master'

Browse source 
steveej-nuc7pjyh-work: manage /dev/sgx devices via a sgx group & adapt posh to handle groups

See merge request steveeJ/infra!31
This commit is contained in:
steveej 2020-01-03 15:55:54 +00:00
commit 0ab8b8ca16
4 changed files with 37 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

2
nix/os/devices/steveej-nuc7pjyh-work/system.nix
View file

@ -2,6 +2,8 @@
let
in {
services.udev.extraRules = ''SUBSYSTEM=="sgx", MODE="0660", GROUP="sgx"'';
users.groups.sgx = {};
networking.hostName = "steveej-nuc7pjyh-work"; # Define your hostname.
boot.kernelPackages = lib.mkForce pkgs.linuxPackages_sgx_latest;
}

5
nix/os/devices/steveej-nuc7pjyh-work/user.nix
View file

@ -12,8 +12,9 @@ in {
uid = 1001;
openssh.authorizedKeys.keys = keys.users.steveej.openssh;
shell = pkgs.posh { image = "quay.io/enarx/fedora"; run_args = "-v /dev/sgx:/dev/sgx"; };
extraGroups = [ "sgx" ];
subUidRanges = [{ startUid = 100000; count = 100000; }];
subGidRanges = [{ startGid = 100000; count = 100000; }];
subUidRanges = [{ startUid = 100000; count = 65536; }];
subGidRanges = [{ startGid = 100000; count = 65536; }];
};
}