message: Remove change made to OpenEnclave cmake that disables compiler-level Spectre mitigations
diff: path: "{{ workspace }}/openenclave-{{ oe_ver }}/build"
  state: directory
  -# Open Enclave turns on the Clang speculative load hardening pass by default.
  -# This is good practice for arbitrary enclaved code, as it applies a general
  -# mitigation that does not depend on source code annotation. However, being
  -# a general mitigation, it also carries about a 30% performance penalty when
  -# measured on various CCF benchmarks. To recover this performance, CCF
  -# disables the general mitigation and relies on audited code, targeting the
  -# specific vulnerable loads.
  -
  -- name: Disable Compiler-level Spectre mitigations
  - replace:
  - path: "{{ workspace }}/openenclave-{{ oe_ver }}/cmake/compiler_settings.cmake"
  - regexp: '-mllvm -x86-speculative-load-hardening'
  - replace: ''
  -
  - name: Install Open Enclave dependencies
  shell: |
  scripts/ansible/install-ansible.sh
  