Where is edgelessdb looking for the my.cnf file? about edgelessdb HOT 2 CLOSED

Hi,

Two things you need to know here:

The underlying SGX SDK doesn't support loading shared objects, so you need to statically link any required plugin. Please try if -DPLUGIN_AUDIT_NULL=STATIC works.

There is currently no way to use a custom my.cnf. Just loading it from the host would allow the host to attack the enclave. We should probably add support for user-supplied my.cnf's somehow. Maybe through the manifest.

from edgelessdb.

Hi,

Two things you need to know here:

The underlying SGX SDK doesn't support loading shared objects, so you need to statically link any required plugin. Please try if -DPLUGIN_AUDIT_NULL=STATIC works.

There is currently no way to use a custom my.cnf. Just loading it from the host would allow the host to attack the enclave. We should probably add support for user-supplied my.cnf's somehow. Maybe through the manifest.

I think support for custom my.cnf is a very useful feature.

Perhaps consider allowing include:

• https://mariadb.com/kb/en/configuring-mariadb-with-option-files/#including-option-files

• edgelessdb/edb/db/mariadb.go

  Line 296 in 74863cc

  cnf := `

from edgelessdb.