Move the implementation of skeleton PAL V2 APIs from liberpal-skeleton-v2.c
to liberpal-skeleton.c
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Since the pal_create_process interface of PAI API v2 has achieved a similar function, fork-test argument is useless.
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

sgxsign now supports --product option to enable product enclave build and launch.
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

- Use liberpal-skeleton to replace liberpal-skeleton.so in README.
- Use liberpal-skeleton-v1.so to replace liberpal-skeleton.so in rune/libcontainer/specconv/example.go
- Use liberpal-skeleton*.so to repalce liberpal-skeleton.so in rune/Makefile and .gitignore
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

Use liberpal-skeleton-v${SKELETON_PAL_VERSION}.so to replace liberpal-skeleton.so in README.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Reformat spec_v1.md and spec_v2.md
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

Leave v1 implementation in a separate file.
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

This argument is used to test whether enclave share mapping between
parent and child process is usable.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

In the GNU C Library, "major" is defined by <sys/sysmacros.h> starting from glibc-2.25,
the macros major and minor are only available in <sys/sysmacros.h>. This fix is for historical compatibility.
Signed-off-by: NLiang Yang <liang3.yang@intel.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

update the shim README.md and add two articles to introduce how to cr…

update the shim README.md and add two articles to introduce how to create and run confidential computing container

For demonstration purpose, the reference container images are
availbale. Currently, web application demos based on OpenJDK 11
and Golang are provided.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

There are still non-trivial number of systems without FLC support.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

There are still lots of SGX1 machines without FLC support deployed
in filed. These machines eventually needs to be migrated to be supported
by SGX in-tree driver which is product-ready and well-maintained.

This patch targets to address the gap between SGX1 machine and SGX
in-tree driver.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

SGX in-tree driver has a different way to go agains SGX out-of-tree
driver. The enclave range is mapped to EPC memory after executing
EINIT, so the anonymous mapping occupying enclave range must be done
early instead of creating it based on the fd of /dev/isgx.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Use st_rdev to retrieve the major number of device.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

- Update deb to version 0.3.0
- Update rpm to version 0.3.0
Signed-off-by: Nshirong <shirong@linux.alibaba.com>

- Update deb to version 0.3.0
- Update rpm to version 0.3.0
Signed-off-by: Nshirong <shirong@linux.alibaba.com>

- Add running rune on ubuntu 18.04-server in running_rune_with_occlum.md
- Add installing rune and occlum-pal with package in running_rune_with_occlum.md
- Update Dockerfile in running_rune_with_occlum.md
- Update the the path of enclave.runtime and rune in running_rune_with_occlum.md
- Update the "enclave.runtime.path" in running_rune_with_occlum_bundle.md
Signed-off-by: Nshirong <shirong@linux.alibaba.com>
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Base64 encode the signatrue when sending signature body from server and base64 decode signature when retriving signature  bodyfrom client

Signed-off-by: Nshirong <shirong@linux.alibaba.com>
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Nshirong <shirong@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. Add the ra_product_enclave configuration to allow users to choose Production
Enclave or Development Enclave to be attested about IAS' remote attestaion.
2. Rename ra related configurations as enclave.attestation.ra in annotations.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>