Skip to content

Commit

Permalink
Fixed enclave integration test
Browse files Browse the repository at this point in the history
The SELinux policy of Fedora Rawhide when running completely in
an initrd is not suitable to let the system boot up. Thus the
current solution is to boot in permissive mode. A better solution
for the future would probably be a selinux policy for enclaves
  • Loading branch information
schaefi committed Sep 12, 2024
1 parent 7077e5e commit 08f6e1b
Showing 1 changed file with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -12,12 +12,12 @@
</profiles>
<preferences>
<version>1.1.1</version>
<packagemanager>zypper</packagemanager>
<packagemanager>dnf5</packagemanager>
<rpm-excludedocs>true</rpm-excludedocs>
<rpm-check-signatures>false</rpm-check-signatures>
</preferences>
<preferences>
<type image="enclave" enclave_format="aws-nitro" kernelcmdline="reboot=k panic=30 pci=off console=ttyS0 i8042.noaux i8042.nomux i8042.nopnp i8042.dumbkbd random.trust_cpu=on rdinit=/sbin/init"/>
<type image="enclave" enclave_format="aws-nitro" kernelcmdline="reboot=k panic=30 pci=off console=ttyS0 i8042.noaux i8042.nomux i8042.nopnp i8042.dumbkbd random.trust_cpu=on enforcing=0 rdinit=/sbin/init"/>
</preferences>
<repository type="rpm-md" alias="kiwi-next-generation" priority="1" arch="x86_64">
<source path="obs://Virtualization:Appliances:Staging/Fedora_Rawhide"/>
Expand Down

0 comments on commit 08f6e1b

Please sign in to comment.