This argument is used to test whether enclave share mapping between
parent and child process is usable.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

In the GNU C Library, "major" is defined by <sys/sysmacros.h> starting from glibc-2.25,
the macros major and minor are only available in <sys/sysmacros.h>. This fix is for historical compatibility.
Signed-off-by: NLiang Yang <liang3.yang@intel.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

There are still lots of SGX1 machines without FLC support deployed
in filed. These machines eventually needs to be migrated to be supported
by SGX in-tree driver which is product-ready and well-maintained.

This patch targets to address the gap between SGX1 machine and SGX
in-tree driver.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

SGX in-tree driver has a different way to go agains SGX out-of-tree
driver. The enclave range is mapped to EPC memory after executing
EINIT, so the anonymous mapping occupying enclave range must be done
early instead of creating it based on the fd of /dev/isgx.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Use st_rdev to retrieve the major number of device.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Nshirong <shirong@linux.alibaba.com>
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Nshirong <shirong@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. Add the ra_product_enclave configuration to allow users to choose Production
Enclave or Development Enclave to be attested about IAS' remote attestaion.
2. Rename ra related configurations as enclave.attestation.ra in annotations.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. transfer config.RaType from string type to uint32 type.
2. rename config.RaEpidQuoteType as config.RaEpidIsLinkable.
3. set config.RaEpidIsLinkable type as uint32.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: Yilin Li YiLin.Li@linux.alibaba.com

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Dropping invalid fields in Quote to avoid invalid Attestation
Evidence Payload error(ErrorCode: 400).
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. Add optional remote attestation annotation fields in config.json.
2. Pass remote attestation configs to runelet.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>

If not distinguish default value and missing value in pb3, pb3 will drop default value
in protobuf requests.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Both Support IAS API V3 and V4.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Due to the design of runelet, the Enclave Runtime PAL is loaded
in host but launched in container. The fact that certain libraries
from Intel SGX PSW would use dlopen() to further load libsgx_launch.so,
which means the container has to have it. In  order to ensure all
libraries dependent by Enclave Runtime PAL are completely loaded in
host, preload them prior to switch into container.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Current cpuid is implemented in assembly, which disallows using cgo.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

- Add docs/running_rune_with_occlum_bundle.md
- Remove docs/running_rune_with_docker.md
- Update skeleton README.md to add way to run rune with skeleton bundle
- Update README.md of inclavare-containers
- Add docs/running_rune_with_occlum.md
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: Njack.wxz <wangxiaozhe@linux.alibaba.com>

Introduce --gen-qe-target-info and --gen-quote options for this purpose.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

With the help of attestation package of rune/libenclave, you can connect IAS service
to check and verify your sgx quote.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

1. Add way to build and install rune.
2. Add way to configure rune to Docker runtimes.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

So that the dynamic libraries are loaded in the host. The fix refers
to https://github.com/moby/moby/pull/39612/commits/a316b10dab79d9298b02c7930958ed52e0ccf4e4Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

This API is not defined in v1 at all.
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>

Signed-off-by: Njack.wxz <wangxiaozhe@linux.alibaba.com>
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>