Adding gramine-manifest-check before signing container

Adding gramine-manifest-check before signing container. Signed-off-by: Davis Benny <[email protected]>
gramineproject · Nov 5, 2024 · 1143bb6 · 1143bb6
1 parent e57a501
commit 1143bb6
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/templates/Dockerfile.common.sign.template b/templates/Dockerfile.common.sign.template
@@ -10,6 +10,8 @@ COPY gsc-signer-key.pem /gramine/app_files/gsc-signer-key.pem
 
 ARG passphrase
 
+RUN {% block path %}{% endblock %} gramine-manifest-check /gramine/app_files/entrypoint.manifest
+
 RUN {% block path %}{% endblock %} gramine-sgx-sign \
       --key /gramine/app_files/gsc-signer-key.pem \
       --manifest /gramine/app_files/entrypoint.manifest \