From 6639cd8c652dcd99862b852766272fc2136f47da Mon Sep 17 00:00:00 2001 From: Vincent Haupert Date: Sat, 15 Jan 2022 13:08:16 +0100 Subject: [PATCH] sgx-ssl: don't run test app in `installCheckPhase` Although we build the test app in SGX simulation mode which does not require hardware SGX support, SGX SSL fails to initialize on non-Intel CPUs. This is unexpected (and inconsistent with the `sgx-sdk` sample code we run in the `installCheckPhase`) and subject to an upstream issue: https://github.com/intel/intel-sgx-ssl/issues/113 Revert this commit as soon as the issue is resolved by Intel. --- pkgs/os-specific/linux/sgx/ssl/default.nix | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/sgx/ssl/default.nix b/pkgs/os-specific/linux/sgx/ssl/default.nix index 174d789a61b5..c54eda19d6a2 100644 --- a/pkgs/os-specific/linux/sgx/ssl/default.nix +++ b/pkgs/os-specific/linux/sgx/ssl/default.nix @@ -67,9 +67,14 @@ stdenv.mkDerivation rec { "DESTDIR=$(out)" ]; - # Build and run the test app + # Build the test app + # + # Running the test app is currently only supported on Intel CPUs + # and will fail on non-Intel CPUs even in SGX simulation mode. + # Therefore, we only build the test app without running it until + # upstream resolves the issue: https://github.com/intel/intel-sgx-ssl/issues/113 doInstallCheck = true; - installCheckTarget = "all test"; + installCheckTarget = "all"; installCheckFlags = [ "SGX_MODE=SIM" "-C sgx/test_app"