Skip to content

fix: respect PCCS_URL environment variable and fix config file format#6

Open
pkrishnath wants to merge 1 commit into
mainfrom
fix/pccs-url-env-var
Open

fix: respect PCCS_URL environment variable and fix config file format#6
pkrishnath wants to merge 1 commit into
mainfrom
fix/pccs-url-env-var

Conversation

@pkrishnath

Copy link
Copy Markdown

Summary

  • Use bash parameter expansion to allow PCCS_URL to be overridden via environment variables while maintaining backward compatibility with the Azure default
  • Fix the config file format by using printf instead of echo to properly write newlines to /etc/sgx_default_qcnl.conf

The entry.sh script had two issues:

  1. Hardcoded PCCS_URL to Azure's global cache, preventing env var overrides
  2. Used echo with \n which doesn't expand to newline in /bin/sh

This ensures /etc/sgx_default_qcnl.conf has proper format:

PCCS_URL=<url>
USE_SECURE_CERT=FALSE

This enables bare-metal SGX deployments to use local PCCS services required for attestation in non-Azure environments.

Test plan

  • Deploy EdgelessDB with custom PCCS_URL environment variable
  • Verify /etc/sgx_default_qcnl.conf contains properly formatted config with two lines
  • Verify attestation works with local PCCS service

🤖 Generated with Claude Code

The entry.sh script had two issues:
1. Hardcoded PCCS_URL to Azure's global cache, preventing env var overrides
2. Used echo with \n which doesn't expand to newline in /bin/sh

Changes:
- Use bash parameter expansion to allow PCCS_URL override while keeping default
- Use printf instead of echo to properly write newlines to config file

This ensures /etc/sgx_default_qcnl.conf has proper format:
PCCS_URL=<url>
USE_SECURE_CERT=FALSE

Enables bare-metal SGX deployments to use local PCCS services.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant