- Add running rune on ubuntu 18.04-server in running_rune_with_occlum.md
- Add installing rune and occlum-pal with package in running_rune_with_occlum.md
- Update Dockerfile in running_rune_with_occlum.md
- Update the the path of enclave.runtime and rune in running_rune_with_occlum.md
- Update the "enclave.runtime.path" in running_rune_with_occlum_bundle.md
Signed-off-by: Nshirong <shirong@linux.alibaba.com>
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Base64 encode the signatrue when sending signature body from server and base64 decode signature when retriving signature  bodyfrom client

Signed-off-by: Nshirong <shirong@linux.alibaba.com>
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Nshirong <shirong@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. Add the ra_product_enclave configuration to allow users to choose Production
Enclave or Development Enclave to be attested about IAS' remote attestaion.
2. Rename ra related configurations as enclave.attestation.ra in annotations.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

This rule enables building package useable for the running system.
Signed-off-by: Nshirong <shirong@linux.alibaba.com>

Signed-off-by: Nshirong <shirong@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. transfer config.RaType from string type to uint32 type.
2. rename config.RaEpidQuoteType as config.RaEpidIsLinkable.
3. set config.RaEpidIsLinkable type as uint32.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: Yilin Li YiLin.Li@linux.alibaba.com

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. Copy rpm package in temporary directory to top directory
2. Remove temporary directory
Signed-off-by: Nshirong <shirong@linux.alibaba.com>

- Add command to launch a CentOS 7.5 container
- Update Occlum SDK container image to 0.14.0
Signed-off-by: Nshirong <shirong@linux.alibaba.com>

Sync up with the attestation package from rune/libenclave.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Dropping invalid fields in Quote to avoid invalid Attestation
Evidence Payload error(ErrorCode: 400).
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. Add optional remote attestation annotation fields in config.json.
2. Pass remote attestation configs to runelet.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>

- Add global `make rpm` for building rpms of rune and shim.
- Add rpm specs at rune/dist/centos and shim/dist/centos.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
Signed-off-by: NChunmei Xu <xuchunmei@linux.alibaba.com>
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>
Signed-off-by: NZhiguang Jia <Zhiguang.Jia@linux.alibaba.com>

Support to automatically mount the /dev/gsgx to enclave container.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

add rpm target in Makefile

1. using `oneof` to distinguish default value and missing value in pb3.
2. dropping invalid fields in Quote to avoid invalid Attestation Evidence
Payload error(ErrorCode: 400).
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

If not distinguish default value and missing value in pb3, pb3 will drop default value
in protobuf requests.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Both Support IAS API V3 and V4.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

fix the issue that /dev is mounted abnormally in the scratch image

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. add global Makefile for all components.
2. add make uninstall for rune/Makefile.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Due to the design of runelet, the Enclave Runtime PAL is loaded
in host but launched in container. The fact that certain libraries
from Intel SGX PSW would use dlopen() to further load libsgx_launch.so,
which means the container has to have it. In  order to ensure all
libraries dependent by Enclave Runtime PAL are completely loaded in
host, preload them prior to switch into container.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

The final error message will be sent back to the parent so there is
no need to log it.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Otherwise the host running `rune spec` must be capable of SGX, which
doesn't make sense.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

This path doesn't always exist in a container.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>