Xfrm needs support the same xsave feature in encalve as in OS.
By cpuid, it can get the same value between xfrm and xcr0.
Signed-off-by: NLiang Yang <liang3.yang@intel.com>
Reviewed-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

shim/runtime/v2/rune/v2: Fix the return value error of getCarrierKind

If not set RuneCarrier(such as Pods), the getCarrierkind should return
<true, rune.Empty, nil>.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

shim/runtime/config: Fix return value error in the GetEnv function

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Call ias.GetVerifiedReport service rather than ias.Verify service to
get IAS report in PAL attest
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

- Add Dragonwell and Skeleton images in reference container image
- Update Version number
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

update the dosc for creating rune containers in Kubernetes cluster

Signed-off-by: NZhiguang Jia <Zhiguang.Jia@linux.alibaba.com>

stub-enclave and ra-tls are still experimental so don't write them
in README.

Signed-off-by Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

ra-tls intends to establish the link between hardware-based remote
attestation and TLS secure channel implementation, which provides
more flexibilities on enclave management and communication.

This is the initial PoC implementation, and the code base of current
implementation is mainly inspired from
https://github.com/cloud-security-research/sgx-ra-tls.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

1. Support Pal Api V3 in stub_enclave.
2. Achieve stub_enclave based on sgxsdk.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Choose wolfSSL as sgx-ra-tls librarys.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

- Update centos version from 7.5 to 8.1
- Update occlum version from 0.14.0 to 0.15.1
- Update the way to Install SGX SDK and SGX PSW
- Update tht value of ENCLAVE_RUNTIME_ARGS
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

- Update deb to version 0.4.0
- Update rpm to version 0.4.0
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

- Update deb to version 0.4.0
- Update rpm to version 0.4.0

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

The official psw installer from Intel doesn't create a symbol link libsgx_launch.so to libsgx_launch.so.1, leading to pal init failure.

Signed-off-by: Shirong Hao<shirong@linux.alibaba.com>

nanosleep() may return the remaining duration longer than
requested one due to timer slack.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: Nshirong <shirong@linux.alibaba.com>

add the epm component

shim: add the skeleton Enclave Runtime carrier.

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

add the epm component, epm is a service that is used to manage the cache pools to optimize the startup time of encalve.

skeleton_remote_attestation_with_rune.md.

Only `liberpal-skeleton-v3.so` supports `rune attest` command.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. Support PAL API V3.
2. Support `rune attest` command.
3. Add skeleton_remote_attestation_with_rune.md.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>