提交 · 4047a18aa69d43cf26b6f79248a8e9a2c12345b7 · openanolis / inclavare-containers

09 9月, 2020 3 次提交

ra-tls: Update README to reflect current implementation · 4047a18a
由 jia zhang 提交于 9月 09, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
4047a18a

rune/libenclave/skeleton && sgx-tools: Resolve the launch token adaptation... · 0ea84c18

由 haosanzi 提交于 9月 09, 2020

rune/libenclave/skeleton && sgx-tools: Resolve the launch token adaptation problem on sgx2 + in-tree

- sgx-tools gen-token command reports an error when running on machine with FLC
- Operations related to lanunch token are not supported on machine with FLC

Signed-off-by: Shirong Hao shirong@linux.alibaba.com

0ea84c18

S
Merge pull request #160 from jiazhiguang/master · a7cfd190
由 stormgbs 提交于 9月 09, 2020
```
epm: reconstruct the code of epm
```
a7cfd190

08 9月, 2020 4 次提交
- J
  
  epm: reconstruct the code of epm · 8d46bc6a
  由 jiazhiguang 提交于 9月 08, 2020
  
  8d46bc6a
- Y
  Revert "ra-tls: Update README.md to keep consistent with 0.4.0" · fcf45681
  由 YiLin.Li 提交于 9月 08, 2020
```
This reverts commit 2df0d0c8.
```
  fcf45681
- H
  ra-tls: Update README.md to keep consistent with 0.4.0 · 7d2f3b29
  由 hustliyilin 提交于 9月 08, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  7d2f3b29
- H
  rune/libenclave/skeleton: Fix code style of sgxutils.c · 30212200
  由 haosanzi 提交于 9月 08, 2020
```
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>
```
  30212200
07 9月, 2020 5 次提交
- S
  Merge pull request #148 from hustliyilin/lyl-dev · d5cd6b8e
  由 stormgbs 提交于 9月 07, 2020
```
shim/runtime: Add the attestation package to process remote attestation requests
```
  d5cd6b8e
- S
  Merge pull request #155 from hustliyilin/master · f7b3c877
  由 stormgbs 提交于 9月 07, 2020
```
shim/runtime: Store inclavare-containers configuration
```
  f7b3c877
- Y
  shim/runtime: Clean up unused remote attestation codes in service.go · 5e059824
  由 YiLin.Li 提交于 9月 07, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  5e059824
- Y
  shim/runtime: Store inclavare-containers configuration · 02a30073
  由 YiLin.Li 提交于 9月 07, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  02a30073
- Y
  shim/runtime: Add the attestation package to process remote attestation requests · 60d0859b
  由 YiLin.Li 提交于 9月 03, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  60d0859b
04 9月, 2020 7 次提交
- J
  
  supports build and sign enclave on host of CentOS 7.1 OS · 62f0bb3c
  由 jiazhiguang 提交于 9月 04, 2020
  
  62f0bb3c
- J
  
  adjust the occlum enviorments to support jdk applications · e48e5529
  由 jiazhiguang 提交于 7月 25, 2020
  
  e48e5529
- J
  
  replace the occlum SDK container with the occlum rpm on host to build the enclave.so · d93cfa18
  由 jiazhiguang 提交于 7月 15, 2020
  
  d93cfa18
- J
  
  supports build and sign enclave with occlum on host · 2dd9140a
  由 jiazhiguang 提交于 7月 14, 2020
  
  2dd9140a
- Y
  rune/libenclave/skeleton: xfrm should be a subset of xcr0 in different machine · f597b056
  由 YangLiang 提交于 9月 04, 2020
```
Xfrm needs support the same xsave feature in encalve as in OS.
By cpuid, it can get the same value between xfrm and xcr0.
Signed-off-by: NLiang Yang <liang3.yang@intel.com>
Reviewed-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  f597b056
- H
  rune/libenclave/skeleton: Allow to build production enclave · 3126e63e
  由 haosanzi 提交于 9月 04, 2020
```
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>
```
  3126e63e
- H
  rune/libenclave: Supply the missing return value description information for PAL API v2 · c35ecea1
  由 hustliyilin 提交于 9月 04, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  c35ecea1
03 9月, 2020 1 次提交
- S
  Merge pull request #146 from hustliyilin/lyl-sgx-tools · 71872a7c
  由 stormgbs 提交于 9月 03, 2020
```
shim/runtime/v2/rune/v2: Fix the return value error of getCarrierKind
```
  71872a7c
04 9月, 2020 1 次提交

shim/runtime/v2/rune/v2: Fix the return value error of getCarrierKind · ab405522

由 YiLin.Li 提交于 9月 03, 2020

If not set RuneCarrier(such as Pods), the getCarrierkind should return
<true, rune.Empty, nil>.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

ab405522

03 9月, 2020 7 次提交
- S
  Merge pull request #145 from hustliyilin/lyl-sgx-tools · 6c4d662e
  由 stormgbs 提交于 9月 03, 2020
```
shim/runtime/config: Fix return value error in the GetEnv function
```
  6c4d662e
- Y
  shim/runtime/config: Fix return value error in the GetEnv function · b6d0a5ca
  由 YiLin.Li 提交于 9月 03, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  b6d0a5ca
- Y
  rune/libenclave: Pass IAS response in the format of protobuf from init-runelet to runelet · e35cb5b5
  由 YiLin.Li 提交于 9月 03, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  e35cb5b5
- Y
  rune/libenclave: Pass IAS resonpse in the format of map[string]string to init-runelet · 0f0693db
  由 YiLin.Li 提交于 9月 03, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  0f0693db
- Y
  rune/libenclave: Get verified IAS report in PAL attest · 44b238c9
  由 YiLin.Li 提交于 9月 03, 2020
```
Call ias.GetVerifiedReport service rather than ias.Verify service to
get IAS report in PAL attest
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  44b238c9
- Y
  rune/libenclave/attestation: Add ias.GetVerifiedReport service · 445375dc
  由 YiLin.Li 提交于 9月 02, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  445375dc
- Y
  rune/libenclave: Format code style · b27065b4
  由 YiLin.Li 提交于 9月 02, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  b27065b4
01 9月, 2020 6 次提交
- Bump the version to 0.4.0 · 81c873f3
  由 jia zhang 提交于 9月 01, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  81c873f3
- S
  docs: update docs for 0.4.0 release · deafd84a
  由 Shirong Hao 提交于 8月 31, 2020
```
- Add Dragonwell and Skeleton images in reference container image
- Update Version number
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>
```
  deafd84a
- J
  
  docs: update the version number #2 · ba9a2484
  由 jiazhiguang 提交于 9月 01, 2020
  
  ba9a2484
- J
  
  docs: update the version number · 368d4c32
  由 jiazhiguang 提交于 9月 01, 2020
  
  368d4c32
- S
  Merge pull request #140 from jiazhiguang/features/shim-makefile · 40e6bf80
  由 stormgbs 提交于 9月 01, 2020
```
update the dosc for creating rune containers in Kubernetes cluster
```
  40e6bf80
- J
  
  update the dosc for creating rune containers in Kubernetes cluster · 4672dad8
  由 jiazhiguang 提交于 9月 01, 2020
  
  4672dad8
31 8月, 2020 6 次提交

W

Fix typo in README · bb01385f
由 windayski 提交于 8月 31, 2020

bb01385f
J
shim-rune: adapts to occlum 0.15.1 · 90cc8932
由 jiazhiguang 提交于 8月 31, 2020
```
Signed-off-by: NZhiguang Jia <Zhiguang.Jia@linux.alibaba.com>
```
90cc8932

Update README for ra-tls · f68b8466

由 jia zhang 提交于 8月 31, 2020

stub-enclave and ra-tls are still experimental so don't write them
in README.

Signed-off-by Jia Zhang <zhang.jia@linux.alibaba.com>

f68b8466

Don't build ra-tls from top directory · 2f850904
由 jia zhang 提交于 8月 31, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
2f850904

ra-tls: Add ra-tls support · 157a1f8d

由 jia zhang 提交于 8月 25, 2020

ra-tls intends to establish the link between hardware-based remote
attestation and TLS secure channel implementation, which provides
more flexibilities on enclave management and communication.

This is the initial PoC implementation, and the code base of current
implementation is mainly inspired from
https://github.com/cloud-security-research/sgx-ra-tls.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

157a1f8d

stub_enclave: Support Pal Api V3 in stub_enclave. · f69987ee

由 YiLin.Li 提交于 7月 28, 2020

1. Support Pal Api V3 in stub_enclave.
2. Achieve stub_enclave based on sgxsdk.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

f69987ee