adjusting manifest template

litentry · Jan 14, 2025 · 02ff172 · 02ff172
1 parent 3e4a225
commit 02ff172
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/tee-worker/omni-executor/omni-executor.manifest.template b/tee-worker/omni-executor/omni-executor.manifest.template
@@ -21,6 +21,7 @@ fs.mounts = [
   { path = "/data", uri = "file:data", type="encrypted", key_name="{{'_sgx_mrsigner' if env.get('SGX', '0') == '1' else 'fake_sgx_mrsigner'}}" },
   { path = "/etc", uri = "file:/etc" },
   { path = "/usr", uri = "file:/usr" },
+  { path = "/storage_db", uri = "file:storage_db" },
 ]
 
 sgx.debug = true
@@ -39,6 +40,10 @@ sgx.trusted_files = [
   "file:/usr/lib/ssl/certs/ca-certificates.crt",
 ]
 
+sgx.allowed_files = [
+  "file:storage_db/",
+]
+
 # The maximum number of threads in a single process needs to be declared in advance.
 # You need to account for:
 # - one main thread
@@ -54,4 +59,4 @@ sgx.remote_attestation = "dcap"
 loader.insecure__use_cmdline_argv = true
 loader.insecure__use_host_env = true
 
-fs.insecure__keys.fake_sgx_mrsigner = "ffeeddccbbaa99887766554433221100"
+fs.insecure__keys.fake_sgx_mrsigner = "ffeeddccbbaa99887766554433221100"