Skip to content

Commit 6f46900

Browse files
committed
kbs/config: Add example config for keylime AS
Create an example config file to show how one could configure the KBS to use Keylime as an alternative attestation service. Signed-off-by: Tyler Fanelli <[email protected]>
1 parent 931f3da commit 6f46900

File tree

1 file changed

+20
-0
lines changed

1 file changed

+20
-0
lines changed
Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
[http_server]
2+
insecure_http = true
3+
4+
[attestation_token]
5+
insecure_key = true
6+
7+
[attestation_service]
8+
type = "keylime-tee"
9+
base_url = "https://0.0.0.0:8881"
10+
api_version_major = 2
11+
api_version_minor = 4
12+
cv_ca_path = "/var/lib/keylime/cv_ca"
13+
14+
[[plugins]]
15+
name = "resource"
16+
type = "LocalFs"
17+
dir_path = "/opt/confidential-containers/kbs/repository"
18+
19+
[admin]
20+
insecure_api = true

0 commit comments

Comments
 (0)