Adding gramine-manifest-check before signing container

Adding gramine-manifest-check before signing container. Signed-off-by: Davis Benny <[email protected]>
gramineproject · Nov 5, 2024 · 89c3078 · 89c3078
1 parent e57a501
commit 89c3078
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/templates/Dockerfile.common.sign.template b/templates/Dockerfile.common.sign.template
@@ -10,8 +10,9 @@ COPY gsc-signer-key.pem /gramine/app_files/gsc-signer-key.pem
 
 ARG passphrase
 
-RUN {% block path %}{% endblock %} gramine-sgx-sign \
-      --key /gramine/app_files/gsc-signer-key.pem \
+RUN {% block path %}{% endblock %} gramine-manifest-check /gramine/app_files/entrypoint.manifest
+
+RUN {% block path %}{% endblock %} gramine-sgx-sign \      --key /gramine/app_files/gsc-signer-key.pem \
       --manifest /gramine/app_files/entrypoint.manifest \
       --output /gramine/app_files/entrypoint.manifest.sgx \
       ${passphrase:+--passphrase "$passphrase"}