Signed-off-by: Nshirong <shirong@linux.alibaba.com>
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Nshirong <shirong@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. Add the ra_product_enclave configuration to allow users to choose Production
Enclave or Development Enclave to be attested about IAS' remote attestaion.
2. Rename ra related configurations as enclave.attestation.ra in annotations.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

This rule enables building package useable for the running system.
Signed-off-by: Nshirong <shirong@linux.alibaba.com>

Signed-off-by: Nshirong <shirong@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. transfer config.RaType from string type to uint32 type.
2. rename config.RaEpidQuoteType as config.RaEpidIsLinkable.
3. set config.RaEpidIsLinkable type as uint32.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: Yilin Li YiLin.Li@linux.alibaba.com

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. Copy rpm package in temporary directory to top directory
2. Remove temporary directory
Signed-off-by: Nshirong <shirong@linux.alibaba.com>

- Add command to launch a CentOS 7.5 container
- Update Occlum SDK container image to 0.14.0
Signed-off-by: Nshirong <shirong@linux.alibaba.com>

Sync up with the attestation package from rune/libenclave.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Dropping invalid fields in Quote to avoid invalid Attestation
Evidence Payload error(ErrorCode: 400).
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. Add optional remote attestation annotation fields in config.json.
2. Pass remote attestation configs to runelet.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>

- Add global `make rpm` for building rpms of rune and shim.
- Add rpm specs at rune/dist/centos and shim/dist/centos.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
Signed-off-by: NChunmei Xu <xuchunmei@linux.alibaba.com>
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>
Signed-off-by: NZhiguang Jia <Zhiguang.Jia@linux.alibaba.com>

Support to automatically mount the /dev/gsgx to enclave container.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

add rpm target in Makefile

1. using `oneof` to distinguish default value and missing value in pb3.
2. dropping invalid fields in Quote to avoid invalid Attestation Evidence
Payload error(ErrorCode: 400).
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

If not distinguish default value and missing value in pb3, pb3 will drop default value
in protobuf requests.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Both Support IAS API V3 and V4.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

fix the issue that /dev is mounted abnormally in the scratch image

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. add global Makefile for all components.
2. add make uninstall for rune/Makefile.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Due to the design of runelet, the Enclave Runtime PAL is loaded
in host but launched in container. The fact that certain libraries
from Intel SGX PSW would use dlopen() to further load libsgx_launch.so,
which means the container has to have it. In  order to ensure all
libraries dependent by Enclave Runtime PAL are completely loaded in
host, preload them prior to switch into container.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

The final error message will be sent back to the parent so there is
no need to log it.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Otherwise the host running `rune spec` must be capable of SGX, which
doesn't make sense.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

This path doesn't always exist in a container.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

/run is usally a symbol link to /var/run but it is not always true.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Current cpuid is implemented in assembly, which disallows using cgo.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

The minor device number should not be hard-coded with 58 for
SGX enclave devices.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>