baremetal-coco: Set https / no_proxy for the agent

This is needed as that's the only way for the agent running inside the
guest to know about proxies.

Signed-off-by: Fabiano Fidêncio <[email protected]>

Author: fidencio

scripts/install-helpers/baremetal-coco/install.sh

@@ -8,6 +8,8 @@ KERNEL_CONFIG_MC_FILE="./96-kata-kernel-config-mc.yaml"
 SKIP_NFD="${SKIP_NFD:-false}"
 TRUSTEE_URL="${TRUSTEE_URL:-"http://kbs-service.trustee-operator-system:8080"}"
 CMD_TIMEOUT="${CMD_TIMEOUT:-900}"
+HTTPS_PROXY="${HTTPS_PROXY:-${https_proxy:-}}"
+NO_PROXY="${NO_PROXY:-${no_proxy:-}}"
 
 export PCCS_API_KEY="${PCCS_API_KEY:-}"
 export PCCS_DB_NAME="${PCCS_DB_NAME:-database}"
@@ -368,6 +370,11 @@ function set_aa_kbc_params_for_kata_agent() {
     kata_override="[hypervisor.qemu]
 kernel_params= \"agent.aa_kbc_params=cc_kbc::$trustee_url\""
 
+    if [ -n "${HTTPS_PROXY}" ]; then
+        kata_override="[hypervisor.qemu]
+kernel_params=\"agent.aa_kbc_params=cc_kbc::$trustee_url agent.https_proxy=$HTTPS_PROXY agent.no_proxy=$NO_PROXY\""
+    fi
+
     # Create base64 encoding of the drop-in to be used as source
     source=$(echo "$kata_override" | base64 -w0) || return 1