diff --git a/tools/docker/Dockerfile.aliyunlinux2 b/tools/docker/Dockerfile.aliyunlinux2 deleted file mode 100644 index 579f011a..00000000 --- a/tools/docker/Dockerfile.aliyunlinux2 +++ /dev/null @@ -1,197 +0,0 @@ -FROM alpine:3.11 AS alpine - -RUN apk update && \ - apk --no-cache add openjdk11 --repository=http://dl-cdn.alpinelinux.org/alpine/edge/community - -FROM registry.cn-hangzhou.aliyuncs.com/alinux/aliyunlinux - -LABEL maintainer="Chunyang Hui " - -#The default shell for the RUN instruction is ["/bin/sh", "-c"], which sometimes cause unexpected error -#for example "source a_file". Use bash as default shell instead. -SHELL ["/bin/bash", "-c"] - -RUN yum install -y --nogpgcheck \ - alinux-release-experimentals && \ - yum install -y --nogpgcheck \ - astyle \ - autoconf \ - automake \ - bison \ - bzip2 \ - boost-devel \ - ca-certificates \ - cmake \ - curl \ - curl-devel \ - createrepo \ - expect \ - expat \ - expat-devel \ - gettext \ - file \ - fuse-devel \ - fuse-libs \ - gawk \ - gcc \ - gcc-c++ \ - glibc-headers \ - gdb \ - git-core \ - gmp-devel \ - golang \ - jq \ - libmpc-devel \ - libxml2-devel \ - libtool \ - pkgconfig \ - python \ - kmod \ - make \ - mod_ssl \ - mpfr-devel \ - ocaml \ - ocaml-ocamlbuild \ - openssl \ - openssl-devel \ - patch \ - python3 \ - sudo \ - uuid-devel \ - vim \ - wget \ - yum-utils && \ - yum groupinstall -y 'Development Tools' && \ - yum clean all - -# Upgrade gcc to compile occlum toolchain. -# This may vary across different platforms depending on the source of gcc. -# Use aliyunlinux devtoolset to upgrade gcc to 8. -RUN yum install -y scl-utils alinux-release-experimentals rpm-build && \ - yum install -y devtoolset-8-gcc-c++ devtoolset-8-gcc devtoolset-8-gdb devtoolset-8-binutils devtoolset-8-make && \ - printf "unset BASH_ENV PROMPT_COMMAND ENV\nsource scl_source enable devtoolset-8\n" > /usr/bin/scl_enable - -ENV BASH_ENV="/usr/bin/scl_enable" -ENV ENV="/usr/bin/scl_enable" -ENV PROMPT_COMMAND=". /usr/bin/scl_enable" - -# With alinux-release-experimentals, install higher version of git and protobuf (3.5). -RUN yum install -y \ - git \ - protobuf \ - protobuf-c \ - protobuf-compiler \ - protobuf-c-compiler \ - protobuf-c-devel \ - protobuf-devel - -# Install PSW and DCAP RPM packages -WORKDIR /tmp -RUN wget https://mirrors.openanolis.org/inclavare-containers/alinux2/sgx_rpm_local_repo.tar.gz && \ - tar -xzf sgx_rpm_local_repo.tar.gz && \ - rm -f sgx_rpm_local_repo.tar.gz && \ - cd /tmp/sgx_rpm_local_repo && \ - rpm -ivh --nodeps libsgx-ae-pce*.rpm \ - libsgx-headers*.rpm \ - libsgx-ae-qe3*.rpm \ - libsgx-ae-qve*.rpm \ - libsgx-enclave-common*.rpm \ - libsgx-quote-ex*.rpm \ - libsgx-urts*.rpm \ - libsgx-dcap-ql*.rpm \ - libsgx-qe3-logic*.rpm \ - libsgx-pce-logic*.rpm \ - libsgx-dcap-quote-verify*.rpm \ - libsgx-dcap-ql*.rpm \ - libsgx-dcap-ql-dev*.rpm \ - libsgx-dcap-default-qpl*.rpm \ - libsgx-dcap-default-qpl-dev*.rpm \ - libsgx-dcap-quote-verify-dev*.rpm \ - libsgx-uae-service*.rpm \ - libsgx-epid*.rpm \ - libsgx-launch*.rpm \ - libsgx-ae-le-*.rpm \ - libsgx-aesm-launch-plugin-*.rpm \ - sgx-aesm-service*.rpm && \ - rm -rf /tmp/sgx_rpm_local_repo - -# Install SGX SDK -WORKDIR /tmp -RUN git clone -b sgx_2.13.3_for_occlum https://github.com/occlum/linux-sgx && \ - cd linux-sgx && \ - make preparation && \ - ./compile_and_install.sh no_mitigation USE_OPT_LIBS=2 && \ - echo 'source /opt/intel/sgxsdk/environment' >> /root/.bashrc && \ - rm -rf /tmp/linux-sgx - -# Install cpuid tool for tests -WORKDIR /tmp -RUN wget http://www.etallen.com/cpuid/cpuid-20200211.x86_64.tar.gz && \ - tar -xf ./cpuid-20200211.x86_64.tar.gz && \ - cp ./cpuid-20200211/cpuid /usr/bin/ && \ - rm -rf /tmp/cpuid-20200211* - -# Install Occlum toolchain -COPY toolchains/musl-gcc /tmp/musl-gcc -WORKDIR /tmp -RUN cd musl-gcc && ./build.sh && ./install_zlib.sh && rm -rf /tmp/musl-gcc -ENV PATH="/opt/occlum/build/bin:/usr/local/occlum/bin:$PATH" - -# Install glibc -COPY toolchains/glibc /tmp/glibc -WORKDIR /tmp -RUN cd glibc && ./build.sh && rm -rf /tmp/glibc - -# Install Occlum Golang toolchain -COPY toolchains/golang /tmp/golang -WORKDIR /tmp -RUN yum install -y go && cd golang && ./build.sh && rm -rf /tmp/golang -ENV PATH="/usr/local/occlum/golang/bin:$PATH" - -# Install Occlum Java toolchain (JDK 11) -ARG JDK11_PATH=/opt/occlum/toolchains/jvm/java-11-openjdk -COPY --from=alpine /usr/lib/jvm/java-11-openjdk $JDK11_PATH -RUN rm $JDK11_PATH/lib/security/cacerts -COPY --from=alpine /etc/ssl/certs/java/cacerts $JDK11_PATH/lib/security/cacerts -COPY toolchains/java /tmp/java -WORKDIR /tmp -RUN cd java && ./install_dragonwell.sh && rm -rf /tmp/java -ENV PATH="/opt/occlum/toolchains/jvm/bin:$PATH" - -# Install Rust -ENV PATH="/root/.cargo/bin:$PATH" -ENV OCCLUM_RUST_VERSION=nightly-2020-10-25 -RUN curl https://sh.rustup.rs -sSf | \ - sh -s -- --default-toolchain ${OCCLUM_RUST_VERSION} -y && \ - rm -rf /root/.cargo/registry && rm -rf /root/.cargo/git && \ - cargo -V - -# Install Occlum Rust toolchain -COPY toolchains/rust /tmp/rust -WORKDIR /tmp -RUN cd rust && ./build.sh && rm -rf /tmp/rust -ENV PATH="/opt/occlum/toolchains/rust/bin:$PATH" - -ARG OCCLUM_BRANCH -ENV LD_LIBRARY_PATH="/opt/intel/sgxpsw/aesm:/usr/lib64/:/usr/local/lib:/opt/intel/sgxsdk/sdk_libs:/usr/lib:$LD_LIBRARY_PATH" -# Install the latest version of Occlum -WORKDIR /root/occlum -RUN rm -rf occlum && \ - source scl_source enable devtoolset-8 && \ - git clone -b $OCCLUM_BRANCH https://github.com/occlum/occlum && \ - cd occlum && \ - source /opt/intel/sgxsdk/environment && \ - make submodule && \ - OCCLUM_RELEASE_BUILD=1 make install && \ - cp -r demos /root/demos && \ - rm -rf /root/occlum - -# Start AESM service automatically -# -# To do so, we add the script to ~/.bashrc. We cannot use systemd to run AESM -# as a "real" service since the pid 1 is not systemd in Docker. So we start -# up AESM service when an user login with an interative shell. -COPY docker/start_aesm.sh /opt/occlum/ -RUN mkdir -p /var/run/aesmd && echo 'sudo /opt/occlum/start_aesm.sh' >> /root/.bashrc - -WORKDIR /root diff --git a/tools/docker/Dockerfile.centos7.5 b/tools/docker/Dockerfile.centos7.5 deleted file mode 100644 index 145a7988..00000000 --- a/tools/docker/Dockerfile.centos7.5 +++ /dev/null @@ -1,148 +0,0 @@ -FROM alpine:3.11 AS alpine - -LABEL maintainer="Qing Li " - -RUN apk update && \ - apk --no-cache add openjdk11 --repository=http://dl-cdn.alpinelinux.org/alpine/edge/community - -FROM centos:7.5.1804 - -LABEL maintainer="He Sun " - -RUN yum install -y \ - astyle \ - autoconf \ - automake \ - ca-certificates \ - boost-devel \ - cmake \ - curl \ - curl-devel \ - epel-release \ - expect \ - fuse-devel \ - fuse-libs \ - gcc \ - gcc-c++ \ - glibc-headers \ - gdb \ - git \ - git-core \ - gmp-devel \ - libmpc-devel \ - libxml2-devel \ - libtool \ - nano \ - pkgconfig \ - python \ - kmod \ - make \ - mod_ssl \ - mpfr-devel \ - ocaml \ - ocaml-ocamlbuild \ - openssl \ - openssl-devel \ - sudo \ - uuid-devel \ - vim \ - wget && \ - yum groupinstall 'Development Tools' -y && \ - yum install -y golang && \ - yum clean all - -# Install Protobuf (version >= 3.0) -WORKDIR /tmp -RUN yum install -y https://cbs.centos.org/kojifiles/packages/protobuf/3.6.1/4.el7/x86_64/protobuf-3.6.1-4.el7.x86_64.rpm && \ - yum install -y https://cbs.centos.org/kojifiles/packages/protobuf/3.6.1/4.el7/x86_64/protobuf-compiler-3.6.1-4.el7.x86_64.rpm && \ - yum install -y https://cbs.centos.org/kojifiles/packages/protobuf/3.6.1/4.el7/x86_64/protobuf-devel-3.6.1-4.el7.x86_64.rpm - -# Upgrade git (version >= 1.8.4) -RUN yum install -y http://opensource.wandisco.com/centos/7/git/x86_64/wandisco-git-release-7-2.noarch.rpm && \ - yum install -y git - -# Install cpuid tool for tests -WORKDIR /tmp -RUN wget http://www.etallen.com/cpuid/cpuid-20200211.x86_64.tar.gz && \ - tar -xf ./cpuid-20200211.x86_64.tar.gz && \ - cp ./cpuid-20200211/cpuid /usr/bin/ && \ - rm -rf /tmp/cpuid-20200211* - -# Upgrade GCC -# Use Developer Toolset 8 from Software Collections (SCLs) to have a newer gcc (8.3.1) than -# the native one (4.8.5) and enable it during the build. -RUN yum install centos-release-scl-rh -y && \ - yum install devtoolset-8-toolchain -y && \ - printf "unset BASH_ENV PROMPT_COMMAND ENV\nsource scl_source enable devtoolset-8\n" > /usr/bin/scl_enable && \ - echo 'source /opt/rh/devtoolset-8/enable' >> /root/.bashrc -ARG BASH_ENV="/usr/bin/scl_enable" -ARG ENV="/usr/bin/scl_enable" -ARG PROMPT_COMMAND=". /usr/bin/scl_enable" - -# Install SGX SDK -WORKDIR /tmp -RUN git clone -b sgx_2.9.1_for_occlum https://github.com/occlum/linux-sgx && \ - cd linux-sgx && \ - ./download_prebuilt.sh && \ - ./compile_and_install.sh no_mitigation && \ - echo 'source /opt/intel/sgxsdk/environment' >> /root/.bashrc && \ - rm -rf /tmp/linux-sgx - -# Install Rust -ENV PATH="/root/.cargo/bin:$PATH" -ENV OCCLUM_RUST_VERSION=nightly-2020-04-07 -RUN curl https://sh.rustup.rs -sSf | \ - sh -s -- --default-toolchain ${OCCLUM_RUST_VERSION} -y && \ - rm -rf /root/.cargo/registry && rm -rf /root/.cargo/git && \ - cargo -V && \ - cargo install sccache - -# Install Occlum toolchain -COPY toolchains/gcc /tmp/gcc -WORKDIR /tmp -RUN cd gcc && ./build.sh && ./install_zlib.sh && rm -rf /tmp/gcc -ENV PATH="/opt/occlum/build/bin:/usr/local/occlum/bin:$PATH" - -# Install Occlum Golang toolchain -COPY toolchains/golang /tmp/golang -WORKDIR /tmp -RUN cd golang && ./build.sh && rm -rf /tmp/golang -ENV PATH="/opt/occlum/toolchains/golang/bin:$PATH" - -# Install Occlum Rust toolchain -COPY toolchains/rust /tmp/rust -WORKDIR /tmp -RUN cd rust && ./build.sh && rm -rf /tmp/rust -ENV PATH="/opt/occlum/toolchains/rust/bin:$PATH" -ENV LD_LIBRARY_PATH="$LD_LIBRARY_PATH:/opt/intel/sgxsdk/sdk_libs" - -# Install Occlum Java toolchain (JDK 11) -ARG JDK11_PATH=/opt/occlum/toolchains/jvm/java-11-openjdk -COPY --from=alpine /usr/lib/jvm/java-11-openjdk $JDK11_PATH -RUN rm $JDK11_PATH/lib/security/cacerts -COPY --from=alpine /etc/ssl/certs/java/cacerts $JDK11_PATH/lib/security/cacerts -COPY toolchains/java /tmp/java -WORKDIR /tmp -RUN cd java && ./install_dragonwell.sh && rm -rf /tmp/java -ENV PATH="/opt/occlum/toolchains/jvm/bin:$PATH" - -# Install the latest version of Occlum -WORKDIR /root -RUN git clone https://github.com/occlum/occlum && \ - cd occlum && \ - source /root/.bashrc && \ - make submodule && \ - OCCLUM_RELEASE_BUILD=1 make && \ - make install && \ - cp -r demos /root/demos && \ - rm -rf /root/occlum - -# Start AESM service automatically -# -# To do so, we add the script to ~/.bashrc. We cannot use systemd to run AESM -# as a "real" service since the pid 1 is not systemd in Docker. So we start -# up AESM service when an user login with an interative shell. -COPY docker/start_aesm.sh /opt/occlum/ -RUN echo '/opt/occlum/start_aesm.sh' >> /root/.bashrc - -WORKDIR /root diff --git a/tools/docker/Dockerfile.centos8.1 b/tools/docker/Dockerfile.centos8.1 deleted file mode 100644 index e033ac19..00000000 --- a/tools/docker/Dockerfile.centos8.1 +++ /dev/null @@ -1,158 +0,0 @@ -FROM alpine:3.11 AS alpine -LABEL maintainer="Qing Li " -RUN apk update && \ - apk --no-cache add openjdk11 --repository=http://dl-cdn.alpinelinux.org/alpine/edge/community - -FROM centos:8.1.1911 - -LABEL maintainer="He Sun " - -RUN yum install epel-release -y && \ - dnf clean all && rm -r /var/cache/dnf && \ - dnf group install 'Development Tools' -y && \ - dnf --enablerepo=PowerTools install -y \ - astyle \ - bison \ - boost-devel \ - cmake \ - createrepo \ - curl-devel \ - expect \ - fuse-devel \ - fuse-libs \ - gawk \ - gmp-devel \ - golang \ - jq \ - libcurl-devel \ - libmpc-devel \ - libxml2-devel \ - mod_ssl \ - mpfr-devel \ - nano \ - ocaml \ - ocaml-ocamlbuild \ - openssl \ - openssl-devel \ - perl \ - protobuf-devel \ - python2 \ - python3 \ - sudo \ - wget \ - uuid-devel \ - vim \ - yum-utils \ - http://downloads.sourceforge.net/ltp/lcov-1.14-1.noarch.rpm &&\ - alternatives --set python /usr/bin/python2 - -# Install cpuid tool for tests -WORKDIR /tmp -RUN wget http://www.etallen.com/cpuid/cpuid-20200211.x86_64.tar.gz && \ - tar -xf ./cpuid-20200211.x86_64.tar.gz && \ - cp ./cpuid-20200211/cpuid /usr/bin/ && \ - rm -rf /tmp/cpuid-20200211* - -# Install Rust -ENV PATH="/root/.cargo/bin:$PATH" -ENV OCCLUM_RUST_VERSION=nightly-2020-09-08 -RUN curl https://sh.rustup.rs -sSf | \ - sh -s -- --default-toolchain ${OCCLUM_RUST_VERSION} -y && \ - rm -rf /root/.cargo/registry && rm -rf /root/.cargo/git && \ - cargo -V - -# Install Occlum toolchain -COPY toolchains/musl-gcc /tmp/musl-gcc -WORKDIR /tmp -RUN cd musl-gcc && ./build.sh && ./install_zlib.sh && rm -rf /tmp/musl-gcc -ENV PATH="/opt/occlum/build/bin:/usr/local/occlum/bin:$PATH" - -# Install glibc -COPY toolchains/glibc /tmp/glibc -WORKDIR /tmp -RUN cd glibc && ./build.sh && rm -rf /tmp/glibc - -# Install Occlum Golang toolchain -COPY toolchains/golang /tmp/golang -WORKDIR /tmp -RUN cd golang && ./build.sh && rm -rf /tmp/golang -ENV PATH="/opt/occlum/toolchains/golang/bin:$PATH" - -# Install Occlum Rust toolchain -COPY toolchains/rust /tmp/rust -WORKDIR /tmp -RUN cd rust && ./build.sh && rm -rf /tmp/rust -ENV PATH="/opt/occlum/toolchains/rust/bin:$PATH" -ENV LD_LIBRARY_PATH="/opt/intel/sgxsdk/sdk_libs" - -# Install Occlum Java toolchain (JDK 11) -ARG JDK11_PATH=/opt/occlum/toolchains/jvm/java-11-openjdk -COPY --from=alpine /usr/lib/jvm/java-11-openjdk $JDK11_PATH -RUN rm $JDK11_PATH/lib/security/cacerts -COPY --from=alpine /etc/ssl/certs/java/cacerts $JDK11_PATH/lib/security/cacerts -COPY toolchains/java /tmp/java -WORKDIR /tmp -RUN cd java && ./install_dragonwell.sh && rm -rf /tmp/java -ENV PATH="/opt/occlum/toolchains/jvm/bin:$PATH" - -# Install SGX PSW -WORKDIR /tmp -RUN echo "ca_directory=/etc/ssl/certs" >> /etc/wgetrc && \ - wget https://download.01.org/intel-sgx/sgx-linux/2.11/distro/centos8.1-server/sgx_rpm_local_repo.tgz && \ - tar -xvf sgx_rpm_local_repo.tgz && \ - rm sgx_rpm_local_repo.tgz && \ - wget https://download.01.org/intel-sgx/sgx-dcap/1.8/linux/distro/centos8.1-server/sgx_rpm_local_repo.tgz && \ - tar -xvf sgx_rpm_local_repo.tgz && \ - rm sgx_rpm_local_repo.tgz && \ - cd /tmp/sgx_rpm_local_repo &&\ - rpm -ivh libsgx-ae-pce*.rpm \ - libsgx-ae-qe3*.rpm \ - libsgx-ae-qve*.rpm \ - libsgx-enclave-common*.rpm \ - libsgx-quote-ex*.rpm \ - libsgx-urts*.rpm \ - libsgx-dcap-ql*.rpm \ - libsgx-qe3-logic*.rpm \ - libsgx-pce-logic*.rpm \ - libsgx-dcap-quote-verify*.rpm \ - libsgx-dcap-ql*.rpm \ - libsgx-dcap-ql-dev*.rpm \ - libsgx-dcap-default-qpl*.rpm \ - libsgx-dcap-default-qpl-dev*.rpm \ - libsgx-dcap-quote-verify-dev*.rpm \ - libsgx-uae-service*.rpm \ - libsgx-epid*.rpm \ - libsgx-launch*.rpm \ - sgx-aesm-service*.rpm && \ - rm -rf /tmp/sgx_rpm_local_repo - -# Install SGX SDK -WORKDIR /tmp -RUN git clone -b sgx_2.11_for_occlum https://github.com/occlum/linux-sgx && \ - cd linux-sgx && \ - make preparation && \ - ./compile_and_install.sh no_mitigation USE_OPT_LIBS=2 && \ - echo 'source /opt/intel/sgxsdk/environment' >> /root/.bashrc && \ - rm -rf /tmp/linux-sgx - -# Install the latest version of Occlum -ARG OCCLUM_BRANCH -WORKDIR /root -RUN git clone -b $OCCLUM_BRANCH https://github.com/occlum/occlum && \ - cd occlum && \ - source /root/.bashrc && \ - make submodule && \ - OCCLUM_RELEASE_BUILD=1 make && \ - make install && \ - cp -r demos /root/demos && \ - rm -rf /root/occlum - -# Start AESM service automatically -# -# To do so, we add the script to ~/.bashrc. We cannot use systemd to run AESM -# as a "real" service since the pid 1 is not systemd in Docker. So we start -# up AESM service when an user login with an interative shell. -COPY docker/start_aesm.sh /opt/occlum/ -RUN mkdir -p /var/run/aesmd && echo '/opt/occlum/start_aesm.sh' >> /root/.bashrc - -WORKDIR /root