Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Move the implementation of skeleton PAL V2 APIs from liberpal-skeleton-v2.c
to liberpal-skeleton.c
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Since the pal_create_process interface of PAI API v2 has achieved a similar function, fork-test argument is useless.
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

sgxsign now supports --product option to enable product enclave build and launch.
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

- Use liberpal-skeleton to replace liberpal-skeleton.so in README.
- Use liberpal-skeleton-v1.so to replace liberpal-skeleton.so in rune/libcontainer/specconv/example.go
- Use liberpal-skeleton*.so to repalce liberpal-skeleton.so in rune/Makefile and .gitignore
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

Use liberpal-skeleton-v${SKELETON_PAL_VERSION}.so to replace liberpal-skeleton.so in README.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Reformat spec_v1.md and spec_v2.md
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

Leave v1 implementation in a separate file.
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

This argument is used to test whether enclave share mapping between
parent and child process is usable.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

In the GNU C Library, "major" is defined by <sys/sysmacros.h> starting from glibc-2.25,
the macros major and minor are only available in <sys/sysmacros.h>. This fix is for historical compatibility.
Signed-off-by: NLiang Yang <liang3.yang@intel.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

There are still lots of SGX1 machines without FLC support deployed
in filed. These machines eventually needs to be migrated to be supported
by SGX in-tree driver which is product-ready and well-maintained.

This patch targets to address the gap between SGX1 machine and SGX
in-tree driver.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

SGX in-tree driver has a different way to go agains SGX out-of-tree
driver. The enclave range is mapped to EPC memory after executing
EINIT, so the anonymous mapping occupying enclave range must be done
early instead of creating it based on the fd of /dev/isgx.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Use st_rdev to retrieve the major number of device.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Nshirong <shirong@linux.alibaba.com>
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Nshirong <shirong@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. Add the ra_product_enclave configuration to allow users to choose Production
Enclave or Development Enclave to be attested about IAS' remote attestaion.
2. Rename ra related configurations as enclave.attestation.ra in annotations.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. transfer config.RaType from string type to uint32 type.
2. rename config.RaEpidQuoteType as config.RaEpidIsLinkable.
3. set config.RaEpidIsLinkable type as uint32.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: Yilin Li YiLin.Li@linux.alibaba.com

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Dropping invalid fields in Quote to avoid invalid Attestation
Evidence Payload error(ErrorCode: 400).
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. Add optional remote attestation annotation fields in config.json.
2. Pass remote attestation configs to runelet.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>

If not distinguish default value and missing value in pb3, pb3 will drop default value
in protobuf requests.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Both Support IAS API V3 and V4.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Due to the design of runelet, the Enclave Runtime PAL is loaded
in host but launched in container. The fact that certain libraries
from Intel SGX PSW would use dlopen() to further load libsgx_launch.so,
which means the container has to have it. In  order to ensure all
libraries dependent by Enclave Runtime PAL are completely loaded in
host, preload them prior to switch into container.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Current cpuid is implemented in assembly, which disallows using cgo.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

- Add docs/running_rune_with_occlum_bundle.md
- Remove docs/running_rune_with_docker.md
- Update skeleton README.md to add way to run rune with skeleton bundle
- Update README.md of inclavare-containers
- Add docs/running_rune_with_occlum.md
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>