You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@teaclave.apache.org by ms...@apache.org on 2020/05/06 21:43:32 UTC

[incubator-teaclave] branch master updated (5d9d6ac -> 30dc61e)

This is an automated email from the ASF dual-hosted git repository.

mssun pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/incubator-teaclave.git.


    from 5d9d6ac  [services] Add README.md (#282)
     new cc321fb  [cmake] Check Intel SGX SDK version
     new 852012d  [docs] Add instruction to setup attestation service section
     new 30dc61e  [ci] Source sgxsdk env in the prepare pipeline

The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 .drone.yml                |  6 ++++++
 CMakeLists.txt            |  4 ++++
 docs/my-first-function.md | 29 ++++++++++++++++++++++++-----
 3 files changed, 34 insertions(+), 5 deletions(-)


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@teaclave.apache.org
For additional commands, e-mail: commits-help@teaclave.apache.org

[incubator-teaclave] 03/03: [ci] Source sgxsdk env in the prepare pipeline

Posted by ms...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

mssun pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/incubator-teaclave.git

commit 30dc61eca139029dde0d2404ca550be3eb8018a4
Author: Mingshen Sun <bo...@mssun.me>
AuthorDate: Wed May 6 14:19:04 2020 -0700

    [ci] Source sgxsdk env in the prepare pipeline
---
 .drone.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.drone.yml b/.drone.yml
index 32a0985..ad3b531 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -6,6 +6,7 @@ steps:
   image: teaclave/teaclave-build-ubuntu-1804-sgx-2.9.1:0.1.0
   commands:
   - . /root/.cargo/env
+  - . /opt/sgxsdk/environment
   - mkdir -p build
   - cd build && cmake -DCMAKE_BUILD_TYPE=Debug -DTEST_MODE=ON ..
 - name: check
@@ -58,6 +59,7 @@ steps:
   image: teaclave/teaclave-build-ubuntu-1804-sgx-dcap-1.6:0.1.0
   commands:
   - . /root/.cargo/env
+  - . /opt/sgxsdk/environment
   - mkdir -p build
   - cd build && cmake -DCMAKE_BUILD_TYPE=Debug -DTEST_MODE=ON -DDCAP=ON ..
 - name: check
@@ -124,6 +126,7 @@ steps:
   image: teaclave/teaclave-build-ubuntu-1804-sgx-2.9.1:0.1.0
   commands:
   - . /root/.cargo/env
+  - . /opt/sgxsdk/environment
   - mkdir -p build
   - cd build && cmake -DTEST_MODE=ON ..
 - name: check
@@ -181,6 +184,7 @@ steps:
   image: teaclave/teaclave-build-ubuntu-1804-sgx-2.9.1:0.1.0
   commands:
   - . /root/.cargo/env
+  - . /opt/sgxsdk/environment
   - mkdir -p build
   - cd build && cmake -DTEST_MODE=ON ..
 - name: check
@@ -212,6 +216,7 @@ steps:
   image: teaclave/teaclave-build-ubuntu-1804-sgx-2.9.1:0.1.0
   commands:
   - . /root/.cargo/env
+  - . /opt/sgxsdk/environment
   - mkdir -p build
   - cd build && cmake -DTEST_MODE=YES ..
 - name: check
@@ -409,6 +414,7 @@ steps:
   image: teaclave/teaclave-build-ubuntu-1804-sgx-2.9.1:0.1.0
   commands:
   - . /root/.cargo/env
+  - . /opt/sgxsdk/environment
   - mkdir -p build
   - cd build && cmake -DRUSTFLAGS="-D warnings" -DTEST_MODE=ON ..
 - name: check


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@teaclave.apache.org
For additional commands, e-mail: commits-help@teaclave.apache.org

[incubator-teaclave] 02/03: [docs] Add instruction to setup attestation service section

Posted by ms...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

mssun pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/incubator-teaclave.git

commit 852012d5cf9fa85ee77f9b85445b9b40ae4a8601
Author: Mingshen Sun <bo...@mssun.me>
AuthorDate: Wed May 6 14:16:00 2020 -0700

    [docs] Add instruction to setup attestation service section
---
 docs/my-first-function.md | 29 ++++++++++++++++++++++++-----
 1 file changed, 24 insertions(+), 5 deletions(-)

diff --git a/docs/my-first-function.md b/docs/my-first-function.md
index a01e989..934fc48 100644
--- a/docs/my-first-function.md
+++ b/docs/my-first-function.md
@@ -43,20 +43,39 @@ $ docker run --rm -v $(pwd):/teaclave -w /teaclave \
 
 To build in simulation mode, you can add `-DSGX_SIM_MODE=ON` to `cmake`.
 
+## Setup Attestation Service
+
+For simplicity, we use Intel Attestation Service (IAS) in this tutorial. To get
+started, you need to enroll in Intel SGX Attestation Service in
+Intel's [attestation service portal](https://api.portal.trustedservices.intel.com/EPID-attestation)
+by subscribing the attestation service for development (linkable is preferred).
+Then, you can find "SPID" and "Primary key" in the subscription details for
+later usage.
+
+There is one more setup if you are using linkable attestation service subscription.
+Edit the `/etc/aesmd.conf` file and uncomment
+the `default quoting type = epid_linkable` line to enable linkable quotes for EPID-based attestation service
+(i.e., Intel Attestation Service). At last, the AESM service need to be restarted by
+`sudo systemctl restart aesmd`.
+
 ## Launch Teaclave Services
 
 Teaclave contains multiple services. To ease the deployment, you can use
 [docker-compose](https://docs.docker.com/compose/) to manage all services in a
 containerized environment.
 
-Launch all services with `docker-compose`:
+Setup environment variables:
 
 ```
-$ export AS_SPID="00000000000000000000000000000000"
-$ export AS_KEY="00000000000000000000000000000000"
-$ export AS_ALGO="sgx_epid"
-$ export AS_URL="https://api.trustedservices.intel.com:443"
+$ export AS_SPID="00000000000000000000000000000000"  # SPID from IAS subscription
+$ export AS_KEY="00000000000000000000000000000000"   # Primary key/Secondary key from IAS subscription
+$ export AS_ALGO="sgx_epid"                          # Attestation algorithm, sgx_epid for IAS
+$ export AS_URL="https://api.trustedservices.intel.com:443"    # IAS URL
+```
+
+Launch all services with `docker-compose`:
 
+```
 $ (cd docker && docker-compose -f docker-compose-ubuntu-1804.yml up --build)
 Starting teaclave-authentication-service ... done
 Starting teaclave-access-control-service ... done


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@teaclave.apache.org
For additional commands, e-mail: commits-help@teaclave.apache.org

[incubator-teaclave] 01/03: [cmake] Check Intel SGX SDK version

Posted by ms...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

mssun pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/incubator-teaclave.git

commit cc321fbdee66055679c92820f7b10bd7f0b0f3f0
Author: Mingshen Sun <bo...@mssun.me>
AuthorDate: Wed May 6 13:45:16 2020 -0700

    [cmake] Check Intel SGX SDK version
---
 CMakeLists.txt | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CMakeLists.txt b/CMakeLists.txt
index ac30fc8..b318c6f 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -7,6 +7,10 @@ include(ExternalProject)
 find_package(Git)
 find_package(OpenSSL)
 check_exe_dependencies(rustup pypy)
+pkg_check_modules(INTEL_SGX_SDK QUIET libsgx_urts=2.9.101.2)
+if(NOT INTEL_SGX_SDK_FOUND)
+  message(FATAL_ERROR "Intel SGX SDK (version 2.9.1) is not found or version not matched.")
+endif()
 
 # ====== VARIABLES FOR CMAKE -D{VAR}=VAL CONFIGURATION BEGIN ======
 set_strvar_from_env_or(SGX_SDK "/opt/sgxsdk" "Path of SGX SDK")


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@teaclave.apache.org
For additional commands, e-mail: commits-help@teaclave.apache.org