From de7d90896df47c6d495534e35dbda5569d1d5aa7 Mon Sep 17 00:00:00 2001
From: Milan Lenco <milan@zededa.com>
Date: Thu, 1 Feb 2024 16:39:49 +0100
Subject: [PATCH] Give wwan microservice access to the config partition

mmagent from the wwan microservice uses GetCipherCredentials to decrypt
username/password for a cellular network. Internally, this depends on
IsTpmEnabled() function, which determines the status of TPM by checking
for the presence/absence of /config/device.cert.pem and
/config/device.key.pem. This means that wwan container should have the
config partition mounted as well, otherwise IsTpmEnabled() may return
incorrect value and cause the decryption to fail.

Signed-off-by: Milan Lenco <milan@zededa.com>
(cherry picked from commit 2dcaf108dc1c75dff32f2b3cc764a44998e008c0)
---
 pkg/wwan/build.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkg/wwan/build.yml b/pkg/wwan/build.yml
index 374ff0c459..576fdaf8ae 100644
--- a/pkg/wwan/build.yml
+++ b/pkg/wwan/build.yml
@@ -5,6 +5,7 @@ config:
     - /lib/modules:/lib/modules
     - /dev:/dev
     - /run:/run
+    - /config:/config
     - /:/hostfs
     - /persist:/persist:rshared,rbind
   net: host