general/occlum
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
714 Commits 3 Branches 0 Tags 8.1 MiB
53658e865b
Commit Graph

73 Commits

Author SHA1 Message Date
ClawSeven
53658e865b Add glibc-supported python demo 2021-06-08 07:54:10 +08:00
LI Qing
e5114a77c4 Add '-DSQLITE_MMAP_READWRITE' for SQLite demo 2021-05-31 18:48:24 +08:00
Shirong Hao
adc79d3a26 Update enclave-tls demo test 2021-05-19 09:51:31 +08:00
zongmin.gu
bd43e5b867 Add SOFABoot demo 2021-04-20 10:52:30 +08:00
Kailun Qin
0f23ddb14e Add the HashiCorp Vault demo 
Signed-off-by: Kailun Qin <kailun.qin@intel.com>
 2021-04-16 18:32:51 +08:00
zongmin.gu
b2c0f5e647 Update golang version to 1.16.3 2021-04-16 09:34:26 +08:00
zongmin.gu
baf550d600 Add enclave ra tls demo into demo CI 2021-04-15 16:29:42 +08:00
Shirong Hao
0c0c4c4abc ADD Enclave TLS Server demo 2021-04-15 16:29:42 +08:00
LI Qing
1cf270634f Polish some documents 2021-04-01 12:32:58 +08:00
yuanwu
dcd673615d Add the flink demo 
Signed-off-by: yuanwu <yuan.wu@intel.com>
 2021-03-22 13:30:55 +08:00
yuanwu
17464d3bbf Add the redis demo 
Signed-off-by: yuanwu <yuan.wu@intel.com>
 2021-03-12 14:31:52 +08:00
LI Qing
7deeccb03b Fix the error of demos with encrypted fs image 2021-03-02 13:25:36 +08:00
Hui, Chunyang
79b264a6c8 Add support for Address Space Layout Randomization 
ASLR is only enabled on release mode. Also manage the whole process
VM with VMManager.
 2021-02-24 14:46:41 +08:00
LI Qing
0b51d83811 Add ProcFS 2021-01-20 12:42:00 +08:00
Hui, Chunyang
787df74be0 Fix Python test malloc failure on SGX machine 
Using tcmalloc could consume more heap. Enlarging kernel heap allocation
can fix this.
Also print result for Python test.
 2020-11-18 22:13:34 +08:00
superajun-wsj
bef3201aef Update demos/font/font_support_for_java/README.md 
OK

Co-authored-by: Zongmin.Gu <59240482+guzongmin@users.noreply.github.com>
 2020-10-21 17:41:49 +08:00
jeffery.wsj
7eb132c2b2 Support occlum font for java 2020-10-21 17:41:49 +08:00
He Sun
9a47791ae3 Put the shebang in the front of run_occlum_bench.sh 2020-10-21 10:38:11 +08:00
yuanwu
66b64f8276 Update the xgboost to latest version 
Intel has optimized the xgboost in latest version. Performance has
obvious acceleration in benchmark. In svm training with Yahoo LTR data,
latest version gets 7.8X acceleration in host, and 2X acceleration in occlum.

Signed-off-by: yuanwu <yuan.wu@intel.com>
 2020-10-18 09:59:06 +08:00
yuanwu
cd588d2ca4 Add the gRPC-golang benchmark 
Copied and Modified the google.golang.org/grpc/benchmark/run_bench.sh to
support the benchmark with occlum.

Signed-off-by: yuanwu <yuan.wu@intel.com>
 2020-10-12 11:24:33 +08:00
yuanwu
69820c0d8c Add the SQLite benchmark app 
Add the SQLite speedtest for performance benchmark

Signed-off-by: yuanwu <yuan.wu@intel.com>
 2020-10-10 14:24:29 +08:00
James Dong
7fb4d9039a Fix an issue caused by recent reverted interface-based service registration 
in cmd/protoc-gen-go-grpc.
 2020-10-10 14:14:14 +08:00
James Dong
fec361f664 Add Golang SQLite demo 2020-09-27 14:21:58 +08:00
Hui, Chunyang
f4b3389bbe Fix golang grpc and local attestation demo to align with occlum 0.16.0 2020-09-20 10:39:54 +08:00
Hui, Chunyang
7b882bd368 Add support for pal library to run libos outside occlum instance 2020-09-18 12:39:12 +08:00
LI Qing
2c8c999d52 Speed up the boot procedure of JVM 2020-09-18 12:39:12 +08:00
James Dong
124acba6db Add a sample of Golang gRPC client/server programs 2020-09-02 17:06:09 +08:00
Hui, Chunyang
027e1569e0 Fix tensorflow lite demo eigen download failure 2020-08-28 21:26:48 +08:00
LI Qing
1463fb525a Fix python demo by enlarging the kernel space heap size 2020-08-26 14:07:31 +08:00
LI Qing
cd5cc0cb5c Update Java toolchains 
1. Replace the OpenJDK with an unmodified OpenJDK from Alpine Linux
2. Add Alibaba Dragonwell as the default JDK for the Java demos
 2020-08-15 19:12:39 +08:00
Hui, Chunyang
122a66289c Fix LA demo to align with occlum command 2020-08-15 19:12:39 +08:00
Hui, Chunyang
faf9c9d14e Add fish script execute permission since SEFS has more strict checking 2020-08-15 19:12:39 +08:00
Hui, Chunyang
7ac917aa1a Fix PAL library command arguments not follow convention 2020-08-15 19:12:39 +08:00
Hui, Chunyang
153a6fcd61 Fix embedded mode demo can't find libraries 2020-08-15 19:12:39 +08:00
Hui, Chunyang
0252f0949d Rename "occlum_context" to "occlum_instance" for demos 2020-08-15 19:12:39 +08:00
Hui, Chunyang
85501d8993 Improve implementation for occlum build 
This commit mainly accomplish two things:
1. Use makefile to manage dependencies for `occlum build`, which can save lots of time
2. Take dirs `build`, `run` outside from `.occlum`. Remove env var "OCCLUM_INSTANCE_DIR"
 2020-08-15 19:12:39 +08:00
Tate, Hongliang Tian
5e8f997d4d Make PIE the default mode for Go toolchain 
Occlum-compatible executable binaries must be Position-Independent
Executable (PIE). Previously, to build such binaries, the users need to
explicitly give `-buildmode=pie` flag to `occlum-go`. Apparently, this
is error-prone. This commit sets `-buildmode=pie` by default for `occlum-go`.

In addition, this commit upgrades the Go version to 1.13.7.
 2020-08-11 05:35:43 +00:00
LI Qing
1f30d75713 Add Java demo 2020-07-17 17:35:24 +00:00
LI Qing
81eb364c5b Install zlib in occlum-gcc toolchians 2020-07-17 17:31:41 +00:00
Hui, Chunyang
9b1d694830 Add support for per-process memory size configuration with rlimit 
Rlimit are now on the same page of memory space limits defined in Occlum.json. Specific
memory size configuration can be set to child process with `prlimit` syscall or using `ulimit`
command in shell script.
 2020-07-17 22:07:56 +08:00
Hui, Chunyang
306c0333ad Fix occlum PAL library compatibility issues in demos 2020-07-14 11:22:11 +00:00
Hui, Chunyang
6ccd30ee3b Remove fish and busybox binaries from entrypoints to make it more secure 2020-06-27 07:56:31 +00:00
Junxian Xiao
86d11e9d44 Refactor the remote attestation demo 
This commits consists of three major changes:

1. Support a new interface to get the base64 quote only.
This is useful in the case that application sends the quote
to service provider server and get the final IAS report there.
The application itself doesn't depend on IAS in this case.

2. Improve the C++ programming style. Now, we only provide
C++ classes and limited C APIs(for configuration and sgx device).

3. Use the more general keywords as names prefix.

Signed-off-by: Junxian Xiao <junxian.xjx@antfin.com>
 2020-06-23 16:59:33 +08:00
Hui, Chunyang
9ce23a8c08 Add symbolic file support for FISH demo 2020-06-13 03:33:32 +00:00
LI Qing
a0d7b96a8f Polish the XGBoost demo 
1. Remove some useless installed packages
2. Adjust max number of threads according to CPU cores
 2020-06-05 15:09:26 +08:00
Junxian Xiao
e8e14350a5 Support access key in remote attestaion demo 
1. add access key configuration and code
2. Upgrade libcurl to support https
3. Support debug compile mode

Signed-off-by: Junxian Xiao <junxian.xjx@antfin.com>
 2020-06-05 14:52:31 +08:00
LI Qing
c1b4814703 Rewrite Python demo with NumPy, scikit-learn, and pandas 2020-06-05 11:56:31 +08:00
zongmin.gu
942321363d Combine the enclave configuration into the occlum configuration file 
Update the occlum.json to align with the gen_enclave_conf design.
Below is the two updated structures:
   "metadata": {
        "product_id": 0,
        "version_number": 0,
        "debuggable": true
    },
    "resource_limits": {
        "max_num_of_threads": 32,
        "kernel_space_heap_size": "32MB",
        "kernel_space_stack_size": "1MB",
        "user_space_size": "256MB"
    }
 2020-06-05 11:03:47 +08:00
Hui, Chunyang
3939899e76 Fix local attestation demo to use new PAL API and sdk 2.9.1 
Also format the code.
 2020-06-04 20:05:55 +08:00
Hui, Chunyang
73b4f8b08c Add support for PAL API v2 2020-05-29 05:26:38 +00:00