We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 1365b72 commit 27a4537Copy full SHA for 27a4537
README.md
@@ -25,3 +25,13 @@ sudo qemu-system-x86_64 \
25
-drive id=pflash-vars-overlay0,if=pflash,file=pflash-vars-overlay0,unit=1 \
26
/path/to/output/dir/build.img
27
```
28
+
29
+### Socket Access
30
31
+To access the `qubes-pesign` socket, typically when building this package in a Qubes executor, create the socket with `socat` like this:
32
+```bash
33
+socat UNIX-LISTEN:/var/run/qubes-pesign,fork EXEC:"qrexec-client-vm vault-uki qubes.PESign"
34
+```
35
+where `vault-uki` is the qube holding the standard configuration for `pesign`.
36
+Ensure the Qubes executor has the correct RPC policy.
37
+This socat command can be placed in `/rw/config/rc.local` to run at startup.
0 commit comments