diff --git a/docs/running_rune_with_occlum.md b/docs/running_rune_with_occlum.md index 6d951021b084627ea754a0ca0017dc3a4b92575b..2bf88b14f0c0f2e3c15c002e3f67ac5df4648255 100644 --- a/docs/running_rune_with_occlum.md +++ b/docs/running_rune_with_occlum.md @@ -2,21 +2,21 @@ [rune](https://github.com/alibaba/inclavare-containers) is a new OCI runtime used to run trusted applications in containers with the hardware-assisted enclave technology. ## Requirements -- Install [Intel SGX driver for Linux](https://github.com/intel/linux-sgx-driver#build-and-install-the-intelr-sgx-driver), required by Intel SGX SDK && PSW. +- Install Intel SGX driver for Linux by following [Intel SGX Installation Guide](https://download.01.org/intel-sgx/sgx-linux/2.9.1/docs/Intel_SGX_Installation_Guide_Linux_2.9.1_Open_Source.pdf), required by Intel SGX SDK && PSW. - Install [enable_rdfsbase kernel module](https://github.com/occlum/enable_rdfsbase#how-to-build), allowing to use `rdfsbase` -family instructions in Occlum. - Ensure that you have one of the following required operating systems: - - CenOS 7.5 + - CenOS 8.1 - Ubuntu 18.04-server Note: You may also choose to launch a container corresponding to above operating systems. ```shell - docker run -it --privileged --device /dev/isgx centos:7.5.1804 + docker run -it --privileged --device /dev/isgx centos:8.1.1911 ``` or ```shell docker run -it --privileged --device /dev/isgx ubuntu:18.04 ``` - If so, you need to run **another docker daemon** inside your container. Please refer to [this guide](https://docs.docker.com/engine/install) to install docker daemon. In CentOS 7.5 container, type the following command to start dockerd. + If so, you need to run **another docker daemon** inside your container. Please refer to [this guide](https://docs.docker.com/engine/install) to install docker daemon. In CentOS 8.1 container, type the following command to start dockerd. ```shell dockerd -b docker0 --storage-driver=vfs & ``` @@ -29,7 +29,7 @@ mkdir "$HOME/rune_workdir" docker run -it --privileged --device /dev/isgx \ -v "$HOME/rune_workdir":/root/rune_workdir \ - occlum/occlum:0.14.0-centos7.5 + occlum/occlum:0.15.1-centos8.1 ``` ### Prepare the materials @@ -52,15 +52,17 @@ Now you can build your occlum application image in the $HOME/rune_workdir direct Type the following commands to create a `Dockerfile`: ``` Dockerfile -cd "$HOME/rune_workdir" +cd "$HOME/rune_workdir/${OCCLUM_INSTANCE_DIR}" cat >Dockerfile <Dockerfile <