提交 · 91ecc6e8d7e6d6dbc65c0b1bad1c3b78f5c88774 · openanolis / inclavare-containers

25 7月, 2020 2 次提交
- H
  rune: Work around the argv problem between rune and occlum · 91ecc6e8
  由 haosanzi 提交于 7月 25, 2020
```
Signed-off-by: Nshirong <shirong@linux.alibaba.com>
```
  91ecc6e8
- H
  rune/libcontainer: Collect and sanity check attestation parameters · fee7b69b
  由 hustliyilin 提交于 7月 25, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  fee7b69b
24 7月, 2020 1 次提交

rune: Clean up attestation parameters · a9d4c594

由 hustliyilin 提交于 7月 24, 2020

1. Add the ra_product_enclave configuration to allow users to choose Production
Enclave or Development Enclave to be attested about IAS' remote attestaion.
2. Rename ra related configurations as enclave.attestation.ra in annotations.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

a9d4c594

22 7月, 2020 4 次提交
- H
  rune/libenclave: Set the import path explicitly · 75809904
  由 hustliyilin 提交于 7月 22, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  75809904
- Y
  rune: revise remote attestation optional configurations type · 245f3459
  由 YiLin.Li 提交于 7月 22, 2020
```
1. transfer config.RaType from string type to uint32 type.
2. rename config.RaEpidQuoteType as config.RaEpidIsLinkable.
3. set config.RaEpidIsLinkable type as uint32.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  245f3459
- Y
  rune/libenclave: add remote attestation type related constants. · 1a6ab70a
  由 YiLin.Li 提交于 7月 22, 2020
```
Signed-off-by: Yilin Li YiLin.Li@linux.alibaba.com
```
  1a6ab70a
- Y
  runectl && sgx-tools: rename runectl as sgx-tools. · a791bc16
  由 YiLin.Li 提交于 7月 22, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  a791bc16
21 7月, 2020 1 次提交

rune/libenclave: drop invalid fields in Quote · 30b12f3a

由 YiLin.Li 提交于 7月 21, 2020

Dropping invalid fields in Quote to avoid invalid Attestation
Evidence Payload error(ErrorCode: 400).
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

30b12f3a

20 7月, 2020 2 次提交

rune: Add remote attestation configurations · 0de060ed

由 hustliyilin 提交于 7月 20, 2020

1. Add optional remote attestation annotation fields in config.json.
2. Pass remote attestation configs to runelet.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

0de060ed

T
rune/libenclave: Minor fixes for skeleton · 1a7da62a
由 Tianjia Zhang 提交于 7月 20, 2020
```
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>
```
1a7da62a

14 7月, 2020 1 次提交

rune/libenclave: Use oneof to distinguish default value and missing value in pb3 · 45ab4396

由 hustliyilin 提交于 7月 14, 2020

If not distinguish default value and missing value in pb3, pb3 will drop default value
in protobuf requests.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

45ab4396

10 7月, 2020 1 次提交
- Y
  rune/libenclave: support IAS V4 API · a29c5c58
  由 YiLin.Li 提交于 7月 08, 2020
```
Both Support IAS API V3 and V4.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  a29c5c58
06 7月, 2020 1 次提交
- Y
  rune/libenclave: Fix spelling mistakes in skeleton README.md. · 4b0aced1
  由 YiLin.Li 提交于 7月 06, 2020
```
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
```
  4b0aced1
04 7月, 2020 1 次提交

rune/libenclave: Preload libsgx_launch.so · 207a059f

由 jia zhang 提交于 7月 04, 2020

Due to the design of runelet, the Enclave Runtime PAL is loaded
in host but launched in container. The fact that certain libraries
from Intel SGX PSW would use dlopen() to further load libsgx_launch.so,
which means the container has to have it. In order to ensure all
libraries dependent by Enclave Runtime PAL are completely loaded in
host, preload them prior to switch into container.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

207a059f

03 7月, 2020 1 次提交

rune/libenclave/intelsgx: Refactor cpuid implementation · 16012460

由 jia zhang 提交于 7月 03, 2020

Current cpuid is implemented in assembly, which disallows using cgo.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

16012460

01 7月, 2020 1 次提交
- docs: Refresh docs for 0.2.0 release · 627ff36f
  由 jia zhang 提交于 6月 30, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  627ff36f
30 6月, 2020 5 次提交

docs: Update rune 0.2.0 release docs · 3fb58326

由 hustliyilin 提交于 6月 30, 2020

- Add docs/running_rune_with_occlum_bundle.md
- Remove docs/running_rune_with_docker.md
- Update skeleton README.md to add way to run rune with skeleton bundle
- Update README.md of inclavare-containers
- Add docs/running_rune_with_occlum.md
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

3fb58326

W
rune: Add Enclave Runtime PAL API v2 spec and programming guide · 492d9b30
由 wangxiaozhe 提交于 6月 30, 2020
```
Signed-off-by: Njack.wxz <wangxiaozhe@linux.alibaba.com>
```
492d9b30

rune && runectl: Support to retrieve enclave quote from aesm service · c73080c4

由 jia zhang 提交于 6月 29, 2020

Introduce --gen-qe-target-info and --gen-quote options for this purpose.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

c73080c4

rune/libenclave: Implement new ecall get_report() for skeleton · 27627e71
由 jia zhang 提交于 6月 28, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
27627e71

rune/libenclave: Add attestation package and corresponding vendor packages. · b8f153c7

由 YiLin.Li 提交于 6月 29, 2020

With the help of attestation package of rune/libenclave, you can connect IAS service
to check and verify your sgx quote.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

b8f153c7

29 6月, 2020 2 次提交

rune/libenclave: Update skeleton README.md · cec15fc8

由 YiLin.Li 提交于 6月 29, 2020

1. Add way to build and install rune.
2. Add way to configure rune to Docker runtimes.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

cec15fc8

rune/libenclave: Initialize nss libraries in Glibc · 0333142e

由 jia zhang 提交于 6月 29, 2020

So that the dynamic libraries are loaded in the host. The fix refers
to https://github.com/moby/moby/pull/39612/commits/a316b10dab79d9298b02c7930958ed52e0ccf4e4Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

0333142e

27 6月, 2020 1 次提交
- rune: Code cleanup · f822dc13
  由 jia zhang 提交于 6月 27, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  f822dc13
24 6月, 2020 2 次提交

T
rune/libenclave: Move pal_kill to Enclave Runtime PAI API v2 · 017cf647
由 Tianjia Zhang 提交于 6月 24, 2020
```
This API is not defined in v1 at all.
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>
```
017cf647

rune/libenclave: Support Enclave Runtime PAL API v2 · 037185ff

由 Tianjia Zhang 提交于 6月 24, 2020

Signed-off-by: Njack.wxz <wangxiaozhe@linux.alibaba.com>
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>

037185ff

23 6月, 2020 1 次提交

rune/libenclave: Implement the general sgx entry point for skeleton · 77613e51

由 jia zhang 提交于 6月 23, 2020

In order to implement more ecall functions, it is necessary to
implement a general sgx entry point with ecall number to
corresponding ecall handler.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

77613e51

22 6月, 2020 3 次提交

rune: runelet does not use logpipe if rune create in detach mode · 24501b64

由 jack.wxz 提交于 6月 10, 2020

Signed-off-by: Njack.wxz <wangxiaozhe@linux.alibaba.com>
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>

24501b64

rune/libenclave: Optimize the way of passing parameters · 4747d9d5

由 Tianjia Zhang 提交于 6月 22, 2020

Because there is no re-exec operation, there is no need to use
environment variables to pass parameters between bootstrap and
runelet, use global variables instead of environment variables.
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>

4747d9d5

rune/libenclave: Implement intelsgx.GetQeTargetInfo() · 48db17d4

由 jia zhang 提交于 6月 21, 2020

Support to retrieve quoting enclave's target information.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

48db17d4

21 6月, 2020 5 次提交
- rune/libenclave: Rename intelsgx.GetToken to intelsgx.GetLaunchToken · d95e43fa
  由 jia zhang 提交于 6月 21, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  d95e43fa
- rune & runectl: Refactor intelsgx.GetToken() · 75cc3d4d
  由 jia zhang 提交于 6月 21, 2020
```
The interaction with aesmd can be shared with other aesm service messages.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  75cc3d4d
- rune & runectl: Refector aesm service · 455c8d9d
  由 jia zhang 提交于 6月 21, 2020
```
In order to involve more aesm services, prepare to place all request
and response messages into the corresponding main sections.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  455c8d9d
- rune/libenclave & runectl: Move aesmd logic into libenclave/intelsgx package · f0a5eeb3
  由 jia zhang 提交于 6月 21, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  f0a5eeb3
- rune/libenclave: Remote unused pal.h in skeleton · e6496ab8
  由 jia zhang 提交于 6月 20, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  e6496ab8
19 6月, 2020 2 次提交
- rune/libenlave/skeleton: Update README for usage · fb4c4f97
  由 jia zhang 提交于 6月 19, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  fb4c4f97
- rune/libenclave: Code clean up for skeleton · af3b579d
  由 jia zhang 提交于 6月 19, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
  af3b579d
18 6月, 2020 3 次提交

rune/libenclave: Fix returning error values for skeleton · 9adfac24
由 jia zhang 提交于 6月 18, 2020
```
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
9adfac24
rune/libenclave: Implement v1 PAL APIs for skeleton · 3ff6d4ec
由 jia zhang 提交于 6月 18, 2020
```
Currently, PAL API only implements v1.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
```
3ff6d4ec

rune/libenclave: Use unified pal api interface · 62217e09

由 jack.wxz 提交于 6月 03, 2020

Use unified API symbols starting with 'pal_'.
Signed-off-by: Njack.wxz <wangxiaozhe@linux.alibaba.com>
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>

62217e09