general/occlum
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Start up AESM service automatically in Docker

Browse Source
This commit is contained in:
Tate, Hongliang Tian 2019-10-12 05:27:46 +00:00
parent ba6b4cc028
commit ebd3608e4a
3 changed files with 18 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
README.md
View File

@ -114,28 +114,24 @@ Step 1-4 are to be done on the host OS:
``` ```
Step 5-9 are to be done on the guest OS running inside the container: Step 5-9 are to be done on the guest OS running inside the container:
5. Start the AESM service required by Intel SGX SDK 5. (Optional) Try the sample code of Intel SGX SDK
```
/opt/intel/sgxpsw/aesm/aesm_service &
```
6. (Optional) Try the sample code of Intel SGX SDK
``` ```
cd /opt/intel/sgxsdk/SampleCode/SampleEnclave && make && ./app cd /opt/intel/sgxsdk/SampleCode/SampleEnclave && make && ./app
``` ```
7. Prepare the submodules required by Occlum LiboS 6. Prepare the submodules required by Occlum LiboS
``` ```
cd /root/occlum/ && make submodule cd /root/occlum/ && make submodule
``` ```
8. Compile and test Occlum LibOS 7. Compile and test Occlum LibOS
``` ```
cd /root/occlum && make && make test cd /root/occlum && make && make test
``` ```
9. Install Occlum LibOS 8. Install Occlum LibOS
``` ```
cd /root/occlum && sudo make install cd /root/occlum && sudo make install
``` ```
which will install the occlum command-line tool. which will install the occlum command-line tool.
10. Try the Hello World sample project 9. Try the Hello World sample project
``` ```
cd /root/occlum/demo/hello_world && make test cd /root/occlum/demo/hello_world && make test
``` ```

8
tools/docker/Dockerfile
View File

@ -72,4 +72,12 @@ WORKDIR /tmp/gcc
RUN ./build.sh RUN ./build.sh
ENV PATH="/opt/occlum/build/bin:/usr/local/occlum/bin:$PATH" ENV PATH="/opt/occlum/build/bin:/usr/local/occlum/bin:$PATH"
# Start AESM service automatically
#
# To do so, we add the script to ~/.bashrc. We cannot use systemd to run AESM
# as a "real" service since the pid 1 is not systemd in Docker. So we start
# up AESM service when an user login with an interative shell.
COPY docker/start_aesm.sh /root
RUN echo './root/start_aesm.sh' >> /root/.bashrc
WORKDIR /root WORKDIR /root

5
tools/docker/start_aesm.sh Executable file
View File

@ -0,0 +1,5 @@
#!/bin/bash
# Start AESM service required by Intel SGX SDK if it is not running
if ! pgrep "aesm_service" > /dev/null ; then
/opt/intel/sgxpsw/aesm/aesm_service
fi