From 7181abd390994f362c56cb00ef267e3752aa9b39 Mon Sep 17 00:00:00 2001
From: "Zheng, Qi" <huaiqing.zq@antgroup.com>
Date: Fri, 31 Mar 2023 14:54:44 +0800
Subject: [PATCH] [demos] Specify the sgx/occlum apt packages version

---
 .../Dockerfile_occlum_instance.ubuntu20.04    | 26 +++++++++++++++----
 1 file changed, 21 insertions(+), 5 deletions(-)

diff --git a/example/container/Dockerfile_occlum_instance.ubuntu20.04 b/example/container/Dockerfile_occlum_instance.ubuntu20.04
index 5ea73cdd..cd6a6aca 100644
--- a/example/container/Dockerfile_occlum_instance.ubuntu20.04
+++ b/example/container/Dockerfile_occlum_instance.ubuntu20.04
@@ -3,16 +3,32 @@ LABEL maintainer="Qi Zheng <huaiqing.zq@antgroup.com>"
 
 # Install SGX DCAP and Occlum runtime
 ENV APT_KEY_DONT_WARN_ON_DANGEROUS_USAGE=1
+ARG PSW_VERSION=2.17.100.3
+ARG DCAP_VERSION=1.14.100.3
+ARG OCCLUM_VERSION=0.29.5-1
 RUN apt update && DEBIAN_FRONTEND="noninteractive" apt install -y --no-install-recommends gnupg wget ca-certificates jq && \
     echo 'deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu focal main' | tee /etc/apt/sources.list.d/intel-sgx.list && \
     wget -qO - https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | apt-key add - && \
     echo 'deb [arch=amd64] https://occlum.io/occlum-package-repos/debian focal main' | tee /etc/apt/sources.list.d/occlum.list && \
     wget -qO - https://occlum.io/occlum-package-repos/debian/public.key | apt-key add - && \
-    apt update && \
-    apt install -y libsgx-uae-service && \
-    apt install -y libsgx-dcap-ql && \
-    apt install -y libsgx-dcap-default-qpl && \
-    apt install -y occlum-runtime && \
+    apt update && apt install -y --no-install-recommends \
+        libsgx-launch=$PSW_VERSION-focal1 \
+        libsgx-epid=$PSW_VERSION-focal1 \
+        libsgx-quote-ex=$PSW_VERSION-focal1 \
+        libsgx-urts=$PSW_VERSION-focal1 \
+        libsgx-enclave-common=$PSW_VERSION-focal1 \
+        libsgx-uae-service=$PSW_VERSION-focal1 \
+        libsgx-ae-pce=$PSW_VERSION-focal1 \
+        libsgx-ae-qe3=$DCAP_VERSION-focal1 \
+        libsgx-ae-id-enclave=$DCAP_VERSION-focal1 \
+        libsgx-ae-qve=$DCAP_VERSION-focal1 \
+        libsgx-dcap-ql=$DCAP_VERSION-focal1 \
+        libsgx-pce-logic=$DCAP_VERSION-focal1 \
+        libsgx-qe3-logic=$DCAP_VERSION-focal1 \
+        libsgx-dcap-default-qpl=$DCAP_VERSION-focal1 \
+        libsgx-dcap-quote-verify=$DCAP_VERSION-focal1 \
+        occlum-runtime=$OCCLUM_VERSION \
+        && \
     apt clean && \
     rm -rf /var/lib/apt/lists/*
 ENV PATH="/opt/occlum/build/bin:/usr/local/occlum/bin:$PATH"