Skip to content

Commit 27a4537

Browse files
committed
1 parent 1365b72 commit 27a4537

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed

README.md

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,3 +25,13 @@ sudo qemu-system-x86_64 \
2525
-drive id=pflash-vars-overlay0,if=pflash,file=pflash-vars-overlay0,unit=1 \
2626
/path/to/output/dir/build.img
2727
```
28+
29+
### Socket Access
30+
31+
To access the `qubes-pesign` socket, typically when building this package in a Qubes executor, create the socket with `socat` like this:
32+
```bash
33+
socat UNIX-LISTEN:/var/run/qubes-pesign,fork EXEC:"qrexec-client-vm vault-uki qubes.PESign"
34+
```
35+
where `vault-uki` is the qube holding the standard configuration for `pesign`.
36+
Ensure the Qubes executor has the correct RPC policy.
37+
This socat command can be placed in `/rw/config/rc.local` to run at startup.

0 commit comments

Comments
 (0)