stub-enclave and ra-tls are still experimental so don't write them
in README.

Signed-off-by Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

ra-tls intends to establish the link between hardware-based remote
attestation and TLS secure channel implementation, which provides
more flexibilities on enclave management and communication.

This is the initial PoC implementation, and the code base of current
implementation is mainly inspired from
https://github.com/cloud-security-research/sgx-ra-tls.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

1. Support Pal Api V3 in stub_enclave.
2. Achieve stub_enclave based on sgxsdk.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Choose wolfSSL as sgx-ra-tls librarys.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

- Update centos version from 7.5 to 8.1
- Update occlum version from 0.14.0 to 0.15.1
- Update the way to Install SGX SDK and SGX PSW
- Update tht value of ENCLAVE_RUNTIME_ARGS
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

- Update deb to version 0.4.0
- Update rpm to version 0.4.0
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

- Update deb to version 0.4.0
- Update rpm to version 0.4.0

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

The official psw installer from Intel doesn't create a symbol link libsgx_launch.so to libsgx_launch.so.1, leading to pal init failure.

Signed-off-by: Shirong Hao<shirong@linux.alibaba.com>

nanosleep() may return the remaining duration longer than
requested one due to timer slack.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: Nshirong <shirong@linux.alibaba.com>

add the epm component

shim: add the skeleton Enclave Runtime carrier.

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

add the epm component, epm is a service that is used to manage the cache pools to optimize the startup time of encalve.

skeleton_remote_attestation_with_rune.md.

Only `liberpal-skeleton-v3.so` supports `rune attest` command.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

1. Support PAL API V3.
2. Support `rune attest` command.
3. Add skeleton_remote_attestation_with_rune.md.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Load function has became unnecessary in the current design.
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Move the implementation of skeleton PAL V2 APIs from liberpal-skeleton-v2.c
to liberpal-skeleton.c
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Since the pal_create_process interface of PAI API v2 has achieved a similar function, fork-test argument is useless.
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

sgxsign now supports --product option to enable product enclave build and launch.
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

- Use liberpal-skeleton to replace liberpal-skeleton.so in README.
- Use liberpal-skeleton-v1.so to replace liberpal-skeleton.so in rune/libcontainer/specconv/example.go
- Use liberpal-skeleton*.so to repalce liberpal-skeleton.so in rune/Makefile and .gitignore
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

Use liberpal-skeleton-v${SKELETON_PAL_VERSION}.so to replace liberpal-skeleton.so in README.
Signed-off-by: NYilin Li <YiLin.Li@linux.alibaba.com>

Reformat spec_v1.md and spec_v2.md
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

Leave v1 implementation in a separate file.
Signed-off-by: NShirong Hao <shirong@linux.alibaba.com>

This argument is used to test whether enclave share mapping between
parent and child process is usable.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

In the GNU C Library, "major" is defined by <sys/sysmacros.h> starting from glibc-2.25,
the macros major and minor are only available in <sys/sysmacros.h>. This fix is for historical compatibility.
Signed-off-by: NLiang Yang <liang3.yang@intel.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

update the shim README.md and add two articles to introduce how to cr…

update the shim README.md and add two articles to introduce how to create and run confidential computing container

For demonstration purpose, the reference container images are
availbale. Currently, web application demos based on OpenJDK 11
and Golang are provided.
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>