提交 · 1a38ec3122af59a802fa68ee3718bca4ba2dfde3 · openanolis / inclavare-containers

15 9月, 2020 1 次提交
- H
  rune/libenclave/skeleton: Simplify get_sgx_xfrm_by_cpuid() · 1a38ec31
  由 haosanzi 提交于 9月 15, 2020
```
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>
```
  1a38ec31
14 9月, 2020 2 次提交

sgx-tools: Modify the usage description of gen-quote command · d008d4b1

由 YiLin.Li 提交于 9月 13, 2020

To use gen-quote command, you also need to have a SPID registered on
IAS(https://api.portal.trustedservices.intel.com/EPID-attestation)
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

d008d4b1

sgx-tools: Add the get-ias-report command to get RA report from IAS · 241e3e4f

由 YiLin.Li 提交于 9月 11, 2020

Given the quote file of an Enclave, a registered `SPID` and `Subscription Key` of [IAS](https://api.portal.trustedservices.intel.com/EPID-attestation), `sgx-tools get-ias-report` command can get remote attestation report from IAS.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

241e3e4f

11 9月, 2020 3 次提交

H
rune/libcontainer/spec_linux: Conditionally mount aesmd and add enclave devices to the whitelist · 01355dca
由 haosanzi 提交于 9月 11, 2020
```
In addition, move enclave-specific code into libenclave.

Signed-off-by: Shirong Hao shirong@linux.alibaba.com
```
01355dca

sgx-tools: Make the rune/libenclave/attestation package under vendor · 838fc478

由 YiLin.Li 提交于 9月 10, 2020

Through importing but not using rune/libenclave/attestation in gen-quote.go
to make the rune/libenclave/attestation package under vendor.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

838fc478

sgx-tools: Update the vendor package `rune` version · 37b4c0bd

由 YiLin.Li 提交于 9月 10, 2020

Update the vendor package github.com/alibaba/inclavare-containers/rune
version to v0.0.0-20200910122807-fd8d2f54(https://github.com/alibaba/inclavare-containers/commit/fd8d2f54e423a3521a5d77fffb2c19f1bd6073f3)
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

37b4c0bd

10 9月, 2020 5 次提交

rune/libenclave/skeleton: Enable --debug option for RA · 46ee7229

由 hustliyilin 提交于 9月 10, 2020

The --debug option of rune should be enabled to show IAS report when running RA.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

46ee7229

rune/libenclave/skeleton: Remove skeleton image from README · d4d64969

由 haosanzi 提交于 9月 10, 2020

iberpal-skeleton is constantly being updated, it may not be compatible with the previous images.

 Signed-off-by: Shirong Hao shirong@linux.alibaba.com

d4d64969

H
rune/libenclave: Enable PAL API Version control for v3 · fa50d64d
由 hustliyilin 提交于 9月 10, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
fa50d64d

rune/libenclave/attestation: Restructure attestation package · fd8d2f54

由 jia zhang 提交于 9月 09, 2020

The new implementation introduces new object called Challenger
and the foundations for SGX EPID-based RA. In future, the object
called Attester will be added to complete the attestation package.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

fd8d2f54

ra-tls: Fix an error and remove a hardcode · 74ae38c3

由 YangLiang 提交于 9月 10, 2020

In python, range paramter should use int type instead of float. And remove SGX_UNLINKABLE_SIGNATURE hardcode by variant quote_type.
Signed-off-by: NLiang Yang <liang3.yang@intel.com>

74ae38c3

09 9月, 2020 3 次提交

ra-tls: Update README to reflect current implementation · 4047a18a
由 jia zhang 提交于 9月 09, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
4047a18a

rune/libenclave/skeleton && sgx-tools: Resolve the launch token adaptation... · 0ea84c18

由 haosanzi 提交于 9月 09, 2020

rune/libenclave/skeleton && sgx-tools: Resolve the launch token adaptation problem on sgx2 + in-tree

- sgx-tools gen-token command reports an error when running on machine with FLC
- Operations related to lanunch token are not supported on machine with FLC

Signed-off-by: Shirong Hao shirong@linux.alibaba.com

0ea84c18

S
Merge pull request #160 from jiazhiguang/master · a7cfd190
由 stormgbs 提交于 9月 09, 2020
```
epm: reconstruct the code of epm
```
a7cfd190

08 9月, 2020 4 次提交
- J
  
  epm: reconstruct the code of epm · 8d46bc6a
  由 jiazhiguang 提交于 9月 08, 2020
  
  8d46bc6a
- Y
  Revert "ra-tls: Update README.md to keep consistent with 0.4.0" · fcf45681
  由 YiLin.Li 提交于 9月 08, 2020
```
This reverts commit 2df0d0c8.
```
  fcf45681
- H
  ra-tls: Update README.md to keep consistent with 0.4.0 · 7d2f3b29
  由 hustliyilin 提交于 9月 08, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  7d2f3b29
- H
  rune/libenclave/skeleton: Fix code style of sgxutils.c · 30212200
  由 haosanzi 提交于 9月 08, 2020
```
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>
```
  30212200
07 9月, 2020 5 次提交
- S
  Merge pull request #148 from hustliyilin/lyl-dev · d5cd6b8e
  由 stormgbs 提交于 9月 07, 2020
```
shim/runtime: Add the attestation package to process remote attestation requests
```
  d5cd6b8e
- S
  Merge pull request #155 from hustliyilin/master · f7b3c877
  由 stormgbs 提交于 9月 07, 2020
```
shim/runtime: Store inclavare-containers configuration
```
  f7b3c877
- Y
  shim/runtime: Clean up unused remote attestation codes in service.go · 5e059824
  由 YiLin.Li 提交于 9月 07, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  5e059824
- Y
  shim/runtime: Store inclavare-containers configuration · 02a30073
  由 YiLin.Li 提交于 9月 07, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  02a30073
- Y
  shim/runtime: Add the attestation package to process remote attestation requests · 60d0859b
  由 YiLin.Li 提交于 9月 03, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  60d0859b
04 9月, 2020 7 次提交
- J
  
  supports build and sign enclave on host of CentOS 7.1 OS · 62f0bb3c
  由 jiazhiguang 提交于 9月 04, 2020
  
  62f0bb3c
- J
  
  adjust the occlum enviorments to support jdk applications · e48e5529
  由 jiazhiguang 提交于 7月 25, 2020
  
  e48e5529
- J
  
  replace the occlum SDK container with the occlum rpm on host to build the enclave.so · d93cfa18
  由 jiazhiguang 提交于 7月 15, 2020
  
  d93cfa18
- J
  
  supports build and sign enclave with occlum on host · 2dd9140a
  由 jiazhiguang 提交于 7月 14, 2020
  
  2dd9140a
- Y
  rune/libenclave/skeleton: xfrm should be a subset of xcr0 in different machine · f597b056
  由 YangLiang 提交于 9月 04, 2020
```
Xfrm needs support the same xsave feature in encalve as in OS.
By cpuid, it can get the same value between xfrm and xcr0.
Signed-off-by: NLiang Yang <liang3.yang@intel.com>
Reviewed-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  f597b056
- H
  rune/libenclave/skeleton: Allow to build production enclave · 3126e63e
  由 haosanzi 提交于 9月 04, 2020
```
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>
```
  3126e63e
- H
  rune/libenclave: Supply the missing return value description information for PAL API v2 · c35ecea1
  由 hustliyilin 提交于 9月 04, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  c35ecea1
03 9月, 2020 1 次提交
- S
  Merge pull request #146 from hustliyilin/lyl-sgx-tools · 71872a7c
  由 stormgbs 提交于 9月 03, 2020
```
shim/runtime/v2/rune/v2: Fix the return value error of getCarrierKind
```
  71872a7c
04 9月, 2020 1 次提交

shim/runtime/v2/rune/v2: Fix the return value error of getCarrierKind · ab405522

由 YiLin.Li 提交于 9月 03, 2020

If not set RuneCarrier(such as Pods), the getCarrierkind should return
<true, rune.Empty, nil>.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

ab405522

03 9月, 2020 7 次提交
- S
  Merge pull request #145 from hustliyilin/lyl-sgx-tools · 6c4d662e
  由 stormgbs 提交于 9月 03, 2020
```
shim/runtime/config: Fix return value error in the GetEnv function
```
  6c4d662e
- Y
  shim/runtime/config: Fix return value error in the GetEnv function · b6d0a5ca
  由 YiLin.Li 提交于 9月 03, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  b6d0a5ca
- Y
  rune/libenclave: Pass IAS response in the format of protobuf from init-runelet to runelet · e35cb5b5
  由 YiLin.Li 提交于 9月 03, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  e35cb5b5
- Y
  rune/libenclave: Pass IAS resonpse in the format of map[string]string to init-runelet · 0f0693db
  由 YiLin.Li 提交于 9月 03, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  0f0693db
- Y
  rune/libenclave: Get verified IAS report in PAL attest · 44b238c9
  由 YiLin.Li 提交于 9月 03, 2020
```
Call ias.GetVerifiedReport service rather than ias.Verify service to
get IAS report in PAL attest
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  44b238c9
- Y
  rune/libenclave/attestation: Add ias.GetVerifiedReport service · 445375dc
  由 YiLin.Li 提交于 9月 02, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  445375dc
- Y
  rune/libenclave: Format code style · b27065b4
  由 YiLin.Li 提交于 9月 02, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  b27065b4
01 9月, 2020 1 次提交
- Bump the version to 0.4.0 · 81c873f3
  由 jia zhang 提交于 9月 01, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  81c873f3