提交 · 5e059824daf070463bc33ac443878035cf7860a1 · openanolis / inclavare-containers

07 9月, 2020 2 次提交
- Y
  shim/runtime: Clean up unused remote attestation codes in service.go · 5e059824
  由 YiLin.Li 提交于 9月 07, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  5e059824
- Y
  shim/runtime: Store inclavare-containers configuration · 02a30073
  由 YiLin.Li 提交于 9月 07, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  02a30073
04 9月, 2020 7 次提交
- J
  
  supports build and sign enclave on host of CentOS 7.1 OS · 62f0bb3c
  由 jiazhiguang 提交于 9月 04, 2020
  
  62f0bb3c
- J
  
  adjust the occlum enviorments to support jdk applications · e48e5529
  由 jiazhiguang 提交于 7月 25, 2020
  
  e48e5529
- J
  
  replace the occlum SDK container with the occlum rpm on host to build the enclave.so · d93cfa18
  由 jiazhiguang 提交于 7月 15, 2020
  
  d93cfa18
- J
  
  supports build and sign enclave with occlum on host · 2dd9140a
  由 jiazhiguang 提交于 7月 14, 2020
  
  2dd9140a
- Y
  rune/libenclave/skeleton: xfrm should be a subset of xcr0 in different machine · f597b056
  由 YangLiang 提交于 9月 04, 2020
```
Xfrm needs support the same xsave feature in encalve as in OS.
By cpuid, it can get the same value between xfrm and xcr0.
Signed-off-by: NLiang Yang <liang3.yang@intel.com>
Reviewed-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  f597b056
- H
  rune/libenclave/skeleton: Allow to build production enclave · 3126e63e
  由 haosanzi 提交于 9月 04, 2020
```
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>
```
  3126e63e
- H
  rune/libenclave: Supply the missing return value description information for PAL API v2 · c35ecea1
  由 hustliyilin 提交于 9月 04, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  c35ecea1
03 9月, 2020 1 次提交
- S
  Merge pull request #146 from hustliyilin/lyl-sgx-tools · 71872a7c
  由 stormgbs 提交于 9月 03, 2020
```
shim/runtime/v2/rune/v2: Fix the return value error of getCarrierKind
```
  71872a7c
04 9月, 2020 1 次提交

shim/runtime/v2/rune/v2: Fix the return value error of getCarrierKind · ab405522

由 YiLin.Li 提交于 9月 03, 2020

If not set RuneCarrier(such as Pods), the getCarrierkind should return
<true, rune.Empty, nil>.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

ab405522

03 9月, 2020 7 次提交
- S
  Merge pull request #145 from hustliyilin/lyl-sgx-tools · 6c4d662e
  由 stormgbs 提交于 9月 03, 2020
```
shim/runtime/config: Fix return value error in the GetEnv function
```
  6c4d662e
- Y
  shim/runtime/config: Fix return value error in the GetEnv function · b6d0a5ca
  由 YiLin.Li 提交于 9月 03, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  b6d0a5ca
- Y
  rune/libenclave: Pass IAS response in the format of protobuf from init-runelet to runelet · e35cb5b5
  由 YiLin.Li 提交于 9月 03, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  e35cb5b5
- Y
  rune/libenclave: Pass IAS resonpse in the format of map[string]string to init-runelet · 0f0693db
  由 YiLin.Li 提交于 9月 03, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  0f0693db
- Y
  rune/libenclave: Get verified IAS report in PAL attest · 44b238c9
  由 YiLin.Li 提交于 9月 03, 2020
```
Call ias.GetVerifiedReport service rather than ias.Verify service to
get IAS report in PAL attest
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  44b238c9
- Y
  rune/libenclave/attestation: Add ias.GetVerifiedReport service · 445375dc
  由 YiLin.Li 提交于 9月 02, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  445375dc
- Y
  rune/libenclave: Format code style · b27065b4
  由 YiLin.Li 提交于 9月 02, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  b27065b4
01 9月, 2020 6 次提交
- Bump the version to 0.4.0 · 81c873f3
  由 jia zhang 提交于 9月 01, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  81c873f3
- S
  docs: update docs for 0.4.0 release · deafd84a
  由 Shirong Hao 提交于 8月 31, 2020
```
- Add Dragonwell and Skeleton images in reference container image
- Update Version number
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>
```
  deafd84a
- J
  
  docs: update the version number #2 · ba9a2484
  由 jiazhiguang 提交于 9月 01, 2020
  
  ba9a2484
- J
  
  docs: update the version number · 368d4c32
  由 jiazhiguang 提交于 9月 01, 2020
  
  368d4c32
- S
  Merge pull request #140 from jiazhiguang/features/shim-makefile · 40e6bf80
  由 stormgbs 提交于 9月 01, 2020
```
update the dosc for creating rune containers in Kubernetes cluster
```
  40e6bf80
- J
  
  update the dosc for creating rune containers in Kubernetes cluster · 4672dad8
  由 jiazhiguang 提交于 9月 01, 2020
  
  4672dad8
31 8月, 2020 7 次提交

W

Fix typo in README · bb01385f
由 windayski 提交于 8月 31, 2020

bb01385f
J
shim-rune: adapts to occlum 0.15.1 · 90cc8932
由 jiazhiguang 提交于 8月 31, 2020
```
Signed-off-by: NZhiguang Jia <Zhiguang.Jia@linux.alibaba.com>
```
90cc8932

Update README for ra-tls · f68b8466

由 jia zhang 提交于 8月 31, 2020

stub-enclave and ra-tls are still experimental so don't write them
in README.

Signed-off-by Jia Zhang <zhang.jia@linux.alibaba.com>

f68b8466

Don't build ra-tls from top directory · 2f850904
由 jia zhang 提交于 8月 31, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
2f850904

ra-tls: Add ra-tls support · 157a1f8d

由 jia zhang 提交于 8月 25, 2020

ra-tls intends to establish the link between hardware-based remote
attestation and TLS secure channel implementation, which provides
more flexibilities on enclave management and communication.

This is the initial PoC implementation, and the code base of current
implementation is mainly inspired from
https://github.com/cloud-security-research/sgx-ra-tls.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

157a1f8d

stub_enclave: Support Pal Api V3 in stub_enclave. · f69987ee

由 YiLin.Li 提交于 7月 28, 2020

1. Support Pal Api V3 in stub_enclave.
2. Achieve stub_enclave based on sgxsdk.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

f69987ee

stub_enclave: Add ra and tls librarys from sgx-ra-tls. · 5473b855

由 YiLin.Li 提交于 7月 27, 2020

Choose wolfSSL as sgx-ra-tls librarys.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

5473b855

30 8月, 2020 5 次提交

docs: Update docs for 0.4.0 release · 5710157d

由 haosanzi 提交于 8月 30, 2020

- Update centos version from 7.5 to 8.1
- Update occlum version from 0.14.0 to 0.15.1
- Update the way to Install SGX SDK and SGX PSW
- Update tht value of ENCLAVE_RUNTIME_ARGS
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

5710157d

rune: Update deb and rpm package to version 0.4.0 · 3382af25

由 Shirong Hao 提交于 8月 30, 2020

- Update deb to version 0.4.0
- Update rpm to version 0.4.0
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

3382af25

S
shim: Update deb and rpm package to version 0.4.0 · 6eed65d2
由 Shirong Hao 提交于 8月 30, 2020
```
- Update deb to version 0.4.0
- Update rpm to version 0.4.0
```
6eed65d2
H
rune/libenclave: Allow to import .pb.go · bdf49091
由 hustliyilin 提交于 8月 30, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
bdf49091

rune/libenclave: Change to preload libsgx_launch.so.1 instead of libsgx_launch.so · 76156bb6

由 haosanzi 提交于 8月 30, 2020

The official psw installer from Intel doesn't create a symbol link libsgx_launch.so to libsgx_launch.so.1, leading to pal init failure.

Signed-off-by: Shirong Hao<shirong@linux.alibaba.com>

76156bb6

28 8月, 2020 1 次提交

rune/libenclave: Work around nanosleep() issue · 196cf5ad

由 jia zhang 提交于 8月 28, 2020

nanosleep() may return the remaining duration longer than
requested one due to timer slack.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

196cf5ad

26 8月, 2020 1 次提交
- H
  rune/libenclave/skeleton: Declare the PAL PAI version in README · 2dcb2023
  由 hustliyilin 提交于 8月 26, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  2dcb2023
25 8月, 2020 1 次提交
- H
  rune/libenclave: Revert the workaround for omitting argv[0] · bc93085f
  由 haosanzi 提交于 8月 25, 2020
```
Signed-off-by: Nshirong <shirong@linux.alibaba.com>
```
  bc93085f
24 8月, 2020 1 次提交
- S
  Merge pull request #126 from jiazhiguang/features/shim-makefile · 0103f542
  由 stormgbs 提交于 8月 24, 2020
```
add the epm component
```
  0103f542