how to configure image decryption keys about enclave-cc HOT 4 OPEN

our CI setup doc should help: https://github.com/confidential-containers/enclave-cc/blob/main/docs/ci-setup.md

from enclave-cc.

1. git clone https://github.com/confidential-containers/kbs.git && cd kbs
2. docker compose up -d
   then error:

from enclave-cc.

The key and the key id are defined in the test image's Dockerfile

Must the key and keyid be declared in the dockerfile? Do I also need to modify the key here if I want to change it? Shouldn't it be provided by kbs?

from enclave-cc.

2. docker compose up -d
   then error:

you should be able to use the pre-built images instead of getting them built yourself (uncomment the images and pick the latest from https://github.com/orgs/confidential-containers/packages?repo_name=trustee

Must the key and keyid be declared in the dockerfile? Do I also need to modify the key here if I want to change it? Shouldn't it be provided by kbs?

No, the labels are just "notes". The setup doc should use the same "secrets" used for encrypting the test image we use.

from enclave-cc.