提交 · 3fb58326725e07a78fa486765374ebb0cb9f299c · openanolis / inclavare-containers

30 6月, 2020 9 次提交

docs: Update rune 0.2.0 release docs · 3fb58326

由 hustliyilin 提交于 6月 30, 2020

- Add docs/running_rune_with_occlum_bundle.md
- Remove docs/running_rune_with_docker.md
- Update skeleton README.md to add way to run rune with skeleton bundle
- Update README.md of inclavare-containers
- Add docs/running_rune_with_occlum.md
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

3fb58326

W
rune: Add Enclave Runtime PAL API v2 spec and programming guide · 492d9b30
由 wangxiaozhe 提交于 6月 30, 2020
```
Signed-off-by: Njack.wxz <wangxiaozhe@linux.alibaba.com>
```
492d9b30
rune: Update README for runectl · aabe8cd2
由 jia zhang 提交于 6月 30, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
aabe8cd2

rune: Fix static compilation error · f9782c51

由 hustliyilin 提交于 6月 30, 2020

`make static` should depend on *.pb.go files.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

f9782c51

rune && runectl: Support to retrieve enclave quote from aesm service · c73080c4

由 jia zhang 提交于 6月 29, 2020

Introduce --gen-qe-target-info and --gen-quote options for this purpose.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

c73080c4

rune/libenclave: Implement new ecall get_report() for skeleton · 27627e71
由 jia zhang 提交于 6月 28, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
27627e71
S
Merge pull request #56 from jiazhiguang/master · 484f1580
由 stormgbs 提交于 6月 30, 2020
```
make the shim-rune adapt for occlum version 0.13
```
484f1580
J
provide the enviorment variables for occlum configuration files and generate... · f72664a8
由 jiazhiguang 提交于 6月 29, 2020
```
provide the enviorment variables for occlum configuration files and generate enclave configuration files from Occlum.json
```
f72664a8

rune/libenclave: Add attestation package and corresponding vendor packages. · b8f153c7

由 YiLin.Li 提交于 6月 29, 2020

With the help of attestation package of rune/libenclave, you can connect IAS service
to check and verify your sgx quote.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

b8f153c7

29 6月, 2020 3 次提交

rune/libenclave: Update skeleton README.md · cec15fc8

由 YiLin.Li 提交于 6月 29, 2020

1. Add way to build and install rune.
2. Add way to configure rune to Docker runtimes.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

cec15fc8

rune/libcontainer: Set the mode of sgx device to 0666 · c3e5c5b7
由 jia zhang 提交于 6月 29, 2020
```
This is a regular setting.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
c3e5c5b7

rune/libenclave: Initialize nss libraries in Glibc · 0333142e

由 jia zhang 提交于 6月 29, 2020

So that the dynamic libraries are loaded in the host. The fix refers
to https://github.com/moby/moby/pull/39612/commits/a316b10dab79d9298b02c7930958ed52e0ccf4e4Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

0333142e

27 6月, 2020 1 次提交
- rune: Code cleanup · f822dc13
  由 jia zhang 提交于 6月 27, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  f822dc13
25 6月, 2020 2 次提交

rune: Minor code cleanup · 9777f5ca
由 jia zhang 提交于 6月 25, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
9777f5ca

rune/libenclave: Fix processing LD_LIBRARY_PATH · 5115df07

由 jia zhang 提交于 6月 25, 2020

Instead of inheriting LD_LIBRARY_PATH by bootstrap, make it available
only for boostrap's child process.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

5115df07

24 6月, 2020 4 次提交

rune/libcontainer: Fix processing LD_LIBRARY_PATH · ad721161

由 Tianjia Zhang 提交于 6月 24, 2020

It is found that LD_LIBRARY_PATH must be set before the process starts to take its effect.
Therefore, set the LD_LIBRARY_PATH environment before bootstrap process starts.
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>

ad721161

T
rune/libenclave: Move pal_kill to Enclave Runtime PAI API v2 · 017cf647
由 Tianjia Zhang 提交于 6月 24, 2020
```
This API is not defined in v1 at all.
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>
```
017cf647

rune/libcontainer: Supports more paths for LD_LIBRARY_PATH · aa17829f

由 Tianjia Zhang 提交于 6月 24, 2020

Current path for LD_LIBRARY_PATH is used for centos. This patches adds the support
for more Linux distributions .
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>

aa17829f

rune/libenclave: Support Enclave Runtime PAL API v2 · 037185ff

由 Tianjia Zhang 提交于 6月 24, 2020

Signed-off-by: Njack.wxz <wangxiaozhe@linux.alibaba.com>
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>

037185ff

23 6月, 2020 1 次提交

rune/libenclave: Implement the general sgx entry point for skeleton · 77613e51

由 jia zhang 提交于 6月 23, 2020

In order to implement more ecall functions, it is necessary to
implement a general sgx entry point with ecall number to
corresponding ecall handler.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

77613e51

22 6月, 2020 4 次提交

rune: runelet does not use logpipe if rune create in detach mode · 24501b64

由 jack.wxz 提交于 6月 10, 2020

Signed-off-by: Njack.wxz <wangxiaozhe@linux.alibaba.com>
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>

24501b64

rune/libenclave: Optimize the way of passing parameters · 4747d9d5

由 Tianjia Zhang 提交于 6月 22, 2020

Because there is no re-exec operation, there is no need to use
environment variables to pass parameters between bootstrap and
runelet, use global variables instead of environment variables.
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>

4747d9d5

runectl: Implement new command gen-qe-target-info · 1adab6cf

由 jia zhang 提交于 6月 21, 2020

Support to retrieve quoting enclave's target information.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

1adab6cf

rune/libenclave: Implement intelsgx.GetQeTargetInfo() · 48db17d4

由 jia zhang 提交于 6月 21, 2020

Support to retrieve quoting enclave's target information.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

48db17d4

21 6月, 2020 6 次提交
- rune/libenclave: Rename intelsgx.GetToken to intelsgx.GetLaunchToken · d95e43fa
  由 jia zhang 提交于 6月 21, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  d95e43fa
- rune & runectl: Refactor intelsgx.GetToken() · 75cc3d4d
  由 jia zhang 提交于 6月 21, 2020
```
The interaction with aesmd can be shared with other aesm service messages.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  75cc3d4d
- rune & runectl: Refector aesm service · 455c8d9d
  由 jia zhang 提交于 6月 21, 2020
```
In order to involve more aesm services, prepare to place all request
and response messages into the corresponding main sections.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  455c8d9d
- rune: Clean up unused pty related vendor packages · a15e9b5a
  由 jia zhang 提交于 6月 21, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  a15e9b5a
- rune/libenclave & runectl: Move aesmd logic into libenclave/intelsgx package · f0a5eeb3
  由 jia zhang 提交于 6月 21, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  f0a5eeb3
- rune/libenclave: Remote unused pal.h in skeleton · e6496ab8
  由 jia zhang 提交于 6月 20, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  e6496ab8
19 6月, 2020 3 次提交
- rune/libenlave/skeleton: Update README for usage · fb4c4f97
  由 jia zhang 提交于 6月 19, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  fb4c4f97
- T
  rune/libcontainer: Compatible with runc if PAL path not configured · b2acc407
  由 Tianjia Zhang 提交于 6月 19, 2020
```
If rune is used as runc, PAL path will not be specified, runc logic
should be followed.
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>
```
  b2acc407
- rune/libenclave: Code clean up for skeleton · af3b579d
  由 jia zhang 提交于 6月 19, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  af3b579d
18 6月, 2020 6 次提交
- rune/libenclave: Fix returning error values for skeleton · 9adfac24
  由 jia zhang 提交于 6月 18, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  9adfac24
- rune/libenclave: Implement v1 PAL APIs for skeleton · 3ff6d4ec
  由 jia zhang 提交于 6月 18, 2020
```
Currently, PAL API only implements v1.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  3ff6d4ec
- runectl: Rename aesm-get-token-request.proto to aesm-service.proto · aa9051c8
  由 jia zhang 提交于 6月 18, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  aa9051c8
- README: Update to reflect the status of shim-rune · 2e44823e
  由 jia zhang 提交于 6月 12, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  2e44823e
- J
  rune/libenclave: Use unified pal api interface · 62217e09
  由 jack.wxz 提交于 6月 03, 2020
```
Use unified API symbols starting with 'pal_'.
Signed-off-by: Njack.wxz <wangxiaozhe@linux.alibaba.com>
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>
```
  62217e09
- J
  rune: runelet does not use logpipe if rune create in detach mode · 003ec8c8
  由 jack.wxz 提交于 6月 10, 2020
```
Signed-off-by: Njack.wxz <wangxiaozhe@linux.alibaba.com>
```
  003ec8c8
16 6月, 2020 1 次提交

rune: Support to load enclave runtime at bootstrap · d2e29fc8

由 tianjia 提交于 6月 16, 2020

Instead loading enclave runtime in container, rune should always load it at bootstrap,
in order to avoid dlopen issue.
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>

d2e29fc8