general/occlum
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,393 Commits 3 Branches 0 Tags 8.1 MiB
e9f2c09012
Commit Graph

264 Commits

Author SHA1 Message Date
Hui, Chunyang
28fb6fd767 Update gvisor test with prepare_bazel.sh 2023-01-18 13:11:16 +08:00
Hui, Chunyang
a9c0b1c4aa Fix kernel heap max size potentially smaller than init 2023-01-18 13:10:19 +08:00
Hui, Chunyang
08b3dc7268 Update internal config tool for EDMM support 2022-12-23 18:33:53 +08:00
LI Qing
d63b3c561c Improve the usability of occlum start/exec/stop cmd 2022-12-11 19:33:04 +08:00
Zheng, Qi
a5cdcc8045 [toolchain] Make occlum-go support gcc/glibc option 
In default, occlum-go uses musl-gcc. Users can configure
occlum-go to use gcc like below.
" CC=gcc occlum-go build "
 2022-12-07 22:14:03 +08:00
Zheng, Qi
4871f15e14 [installer] Add occlum golang debian installer 2022-11-07 13:23:59 +08:00
Zheng, Qi
37d1f58281 [toolchain] Use Occlum go repo 2022-11-01 15:21:52 +08:00
Zheng, Qi
d5c84facf4 [toolchain] Update java 11 (musl) toolchain 2022-10-31 15:09:26 +08:00
Zheng, Qi
f101421d37 [tools] Add helper command to print mrsigner and mrenclave 2022-10-18 23:58:16 +08:00
Zheng, Qi
5b29761e7b [toolchain] Fix glibc deb package link path error 2022-10-08 15:26:53 +08:00
Sinuo Liu
11d086bc6a Add anolis 8.4 docker image support 2022-10-08 15:00:32 +08:00
Jianfeng Jiang
62b8b5889d fix copy_bom error message if rsync is not installed 2022-09-28 16:51:42 +08:00
Jianfeng Jiang
12b2f3b18d warn on nonempty image directory 2022-09-26 20:06:16 +08:00
Jianfeng Jiang
f1058e4ebb fix copy_bom sliently exit when autodep fails 2022-09-26 20:06:16 +08:00
Zheng, Qi
a20b52bae3 [installer] Add glibc installer deb 2022-09-19 10:46:52 +08:00
Zheng, Qi
d2071f65da [installer] Add copy_bom tool to occlum deb package 2022-09-19 10:46:52 +08:00
volcano0dr
a389dc216c Bump to 0.29.0 2022-09-14 20:05:04 +08:00
volcano0dr
69b35e6429 [deps/rust-sgx-sdk] Upgrade rust-sgx-sdk to 1.1.5 2022-09-14 20:05:04 +08:00
zhubojun
8ba2e7e6d8 [tools] Set the default pkru value at Occlum.json's parse 2022-09-01 12:56:53 +08:00
Lan Yun
fbff05bddb Update the Golang version to 1.18.4 and use it as the default one. 
Signed-off-by: Lan Yun <yun.lan@intel.com>
 2022-08-08 12:18:33 +08:00
dr264275
67ca5444f4 Bump to 0.28.0 
Signed-off-by: dr264275 <dr264275@antgroup.com>
 2022-07-17 17:12:14 +08:00
zhubojun
b65cb4e017 [tools] Support configuring PKU in Occlum.json 2022-07-17 17:12:14 +08:00
Zheng, Qi
07ca217bc7 [tools] Set libsgx-ae-id-enclave and libsgx-ae-qe3 version clearly 2022-07-17 17:12:14 +08:00
zhubojun
b283b07219 [ci] Update pccs configuration 2022-07-17 17:12:14 +08:00
dependabot[bot]
8c926b7cd2 Bump regex from 1.3.7 to 1.5.5 in /tools/gen_internal_conf 
Bumps [regex](https://github.com/rust-lang/regex) from 1.3.7 to 1.5.5.
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/compare/regex-1.3.7...1.5.5)

---
updated-dependencies:
- dependency-name: regex
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-06-16 10:09:43 +08:00
dependabot[bot]
3b4c0dc8b9 Bump regex from 1.5.4 to 1.5.5 in /tools/copy_bom 
Bumps [regex](https://github.com/rust-lang/regex) from 1.5.4 to 1.5.5.
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/compare/1.5.4...1.5.5)

---
updated-dependencies:
- dependency-name: regex
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-06-15 18:59:06 +08:00
Hui, Chunyang
7772411378 Fix aesm check failure on SGX v1 machine 2022-04-14 16:26:03 +08:00
Zheng, Qi
4d71868532 Set libsgx-ae-qve version clearly to avoid mismatch 2022-04-11 16:48:50 +08:00
Zheng, Qi
cd5c913dc7 [tools] Checking aesm service is not necessary for SGX2 2022-03-22 18:00:00 +08:00
LI Qing
66d1ebe918 [hyper mode] Add compile support 2022-03-19 15:32:45 +08:00
LI Qing
bec8aa1c38 [hyper mode] Update gen_internal_conf to support ms buffer 2022-03-19 15:32:45 +08:00
Hui, Chunyang
af5d95a2f6 Update musl package version 2022-03-10 16:28:31 +08:00
Hui, Chunyang
aba1c7de15 Remove rpm repo configuration and update deb repo for ubuntu 20.04 2022-03-10 16:28:31 +08:00
LI Qing
86e85ba539 Add gRPC glibc demo and stress test 2022-03-04 11:37:13 +08:00
zhubojun
fbcf20d383 Upgrade CI image to ubuntu20.04 2022-03-04 11:37:13 +08:00
zongmin.gu
122cf2a7bc Update glibc to 2.31 2022-02-22 16:05:36 +08:00
zongmin.gu
f790f3d964 Add ubuntu20.04 docker file 2022-02-22 16:05:36 +08:00
Zheng, Qi
477ae99880 Set SONAME for Occlum DCAP library 2022-02-11 11:10:02 +08:00
zongmin.gu
ea3135fa3d Update the centos docker file 2022-02-11 11:10:02 +08:00
Zheng, Qi
a270eb4af1 Build and install dcap lib when make submodule 
This reverts commit 4c99c875e7bddec85431ddb883adea58b7e530cd.
 2022-02-11 11:10:02 +08:00
Zheng, Qi
4c99c875e7 [dockerfiles] Install dcap lib in Occlum docker images 2022-02-09 10:27:44 +08:00
Zheng, Qi
637dc73b1b Add dcap library into Occlum prebuilt toolchains 2022-02-09 10:27:44 +08:00
zongmin.gu
39f268891e Update the docker file for SGX SDK 2.15.1 2021-12-06 19:19:53 +08:00
Zheng, Qi
7db9d9b955 Add SGX KSS support 
Signed-off-by: Zheng, Qi <huaiqing.zq@antgroup.com>
 2021-12-06 15:46:34 +08:00
Zheng, Qi
d21bcf245e Install openjdk 8 to occlum toolchain 2021-12-06 13:47:27 +08:00
Hui, Chunyang
17e86e87d0 Fix building CI image for TF serving and Openvino 2021-11-08 19:15:00 +08:00
Hui, Chunyang
edaf2374b0 Support building CI image for different branches 2021-11-08 19:15:00 +08:00
Zheng, Qi
28baa5b080 Make sure replacing ':' with '\:' in Makefile targets 
Signed-off-by: Zheng, Qi <huaiqing.zq@antgroup.com>
 2021-11-03 14:54:27 +08:00
Zheng, Qi
e24a9944e3 Make sure bash is built as PIE 
Signed-off-by: Zheng, Qi <huaiqing.zq@antgroup.com>
 2021-11-03 08:12:42 +08:00
zongmin.gu
b4d89f6c77 Update CentOS base image 2021-10-22 17:16:52 +08:00
Shuocheng Wang
25006ee673 Add clang dependency to docker file 2021-10-22 17:16:52 +08:00
Zheng, Qi
a825499d47 Update busybox to support new glibc (>2.31) 
Signed-off-by: Zheng, Qi <huaiqing.zq@antgroup.com>
 2021-10-22 17:16:52 +08:00
Zheng, Qi
b79adca20d Update dockerfile to build busybox into toolchain 
Signed-off-by: Zheng, Qi <huaiqing.zq@antgroup.com>
 2021-10-17 16:48:48 +08:00
Zheng, Qi
2d351c9d31 Add occlum busybox prebuild script into toolchain 
Signed-off-by: Zheng, Qi <huaiqing.zq@antgroup.com>
 2021-10-17 16:48:48 +08:00
zongmin.gu
c49e3d8027 Use Intel IPP in SGX SDK 2021-10-01 08:29:25 +08:00
zongmin.gu
7286c0c02c Update with SGX SDK 2.14 2021-10-01 08:29:25 +08:00
Hui, Chunyang
a0453f1262 Add capabilities of building grpc CI image from different branches 2021-09-26 21:06:02 +08:00
jianfengjiang
f0793b0d30 implement autodep for copydirs 2021-09-24 19:02:26 +08:00
Zheng, Qi
aeca3cd5cb Update aliyunlinux sgx rpm source 
Signed-off-by: Zheng, Qi <huaiqing.zq@antgroup.com>
 2021-09-23 19:33:36 +08:00
Zheng, Qi
ea67f50fc2 Add building bash into occlum docker image 
Signed-off-by: Zheng, Qi <huaiqing.zq@antgroup.com>
 2021-09-23 19:33:36 +08:00
Zheng, Qi
6a8815706d Add bash build script for both occlum-gcc and gcc 
Signed-off-by: Zheng, Qi <huaiqing.zq@antgroup.com>
 2021-09-23 19:33:36 +08:00
jianfengjiang
d598f36700 Modify flink demo with copy_bom 2021-09-23 15:42:15 +08:00
jianfengjiang
4a69b58479 Infer default dynamic loader 2021-09-23 15:42:15 +08:00
jianfengjiang
9a85361e35 Modify demos to enable autodep without creating softlinks 2021-09-23 15:42:15 +08:00
jianfengjiang
0fa5f434cc Enhance autodep with LD_LIBRARY_PATH 2021-09-23 15:42:15 +08:00
jianfengjiang
ff986cce1f Use structOpt to replace clap 2021-09-23 15:42:15 +08:00
Zheng, Qi
2795b8672f Use toolchains from the git clone source instead of from the local path 
Signed-off-by: Zheng, Qi <huaiqing.zq@antgroup.com>
 2021-09-22 19:39:47 +08:00
Zheng, Qi
36990fc97c Remove obsolete dockerfiles 
Signed-off-by: Zheng, Qi <huaiqing.zq@antgroup.com>
 2021-09-22 12:54:39 +08:00
jiangjianfeng
da4669b8c4 Modify java demo with copy_bom 2021-09-17 15:50:15 +08:00
jiangjianfeng
f8abcd9a1f Modify hello_cc demo with copy_bom 2021-09-17 15:50:15 +08:00
jiangjianfeng
31ee9ea404 Add real file operations 2021-09-17 15:50:15 +08:00
jiangjianfeng
9c2005348a Remove redundant operations 2021-09-17 15:50:15 +08:00
jiangjianfeng
f5a5de669b Find dependencies for each elf file 2021-09-17 15:50:15 +08:00
jiangjianfeng
e47a0673e0 Resolve environmental variables in bom file 2021-09-17 15:50:15 +08:00
jiangjianfeng
53d1d0010d Add operations to manage NormalFile 2021-09-17 15:50:15 +08:00
jiangjianfeng
d2656a3571 Add operations to manage Source. 
Source represents operations with the same source directory.
 2021-09-17 15:50:15 +08:00
jiangjianfeng
66997b2852 Add operations to manage Target. 
Target represents operations with the same destination.
 2021-09-17 15:50:15 +08:00
jiangjianfeng
6f81a58a03 Find all included bom files recursively 2021-09-17 15:50:15 +08:00
jiangjianfeng
614b958082 Add basic operations to manage structure Bom 2021-09-17 15:50:15 +08:00
jiangjianfeng
c172b2be5c Add structures to store the content of bom file 2021-09-17 15:50:15 +08:00
jiangjianfeng
6a0435d9b6 Define error numbers 2021-09-17 15:50:15 +08:00
jiangjianfeng
33d074e280 Parse command line options 2021-09-17 15:50:15 +08:00
Zheng, Qi
69d3d3fca2 Fix the error when building glibc with gcc 9 
Signed-off-by: Zheng, Qi <huaiqing.zq@antgroup.com>
 2021-09-16 16:32:51 +08:00
zongmin.gu
dd8231c8a2 Update the openanolis URL in alinux3 docker file 2021-09-15 14:49:25 +08:00
zongmin.gu
cb18a03deb Add rsync into the docker image 2021-09-15 14:49:25 +08:00
ClawSeven
136c2cca95 Seperate ssl generation with environment preparation 2021-09-03 18:42:50 +08:00
ClawSeven
ed3641a66a Optimize tensorflow_serving workflow 2021-08-16 16:58:03 +08:00
Zheng, Qi
f73d417847 Make it accordance for occlum package name and extracted dir name 
For example, in occlum_instance dir, do "occlum package occlum_test".
After extracting the occlum_test.tar.gz, we will get "occlum_test"
instead of "occlum_instance".

Signed-off-by: Zheng, Qi <huaiqing.zq@antgroup.com>
 2021-08-11 20:01:56 +08:00
Zheng, Qi
05d4c7d7db Add similation and debug mode occlum package check and support 
Signed-off-by: Zheng, Qi <huaiqing.zq@antgroup.com>
 2021-08-07 20:44:19 +08:00
LI Qing
42bed8d338 Remove the mount config for tmp dir 2021-08-03 19:45:56 +08:00
Hui, Chunyang
dc67dfb9aa Re-enable aliyunlinux 3 image as default aliyunlinux image 2021-07-23 14:03:33 +08:00
Hui, Chunyang
fe74bb91dd Fix deb package building error and add extra checks for version 2021-07-19 19:08:01 +08:00
LI Qing
1c625f53b8 Remove the cpu online file from image 2021-07-14 11:00:42 +08:00
Hui, Chunyang
04c3f485dc Add aliyunlinux 3 docker image support 2021-07-09 16:00:16 +08:00
LI Qing
1e24dcea6a Modify the protect-integrity tool to print result on file 2021-06-28 21:11:41 +08:00
Hui, Chunyang
2217cf83b9 Update Intel SGX SDK version to 2.13.3 2021-06-25 21:12:42 +08:00
Hui, Chunyang
eaf47d1662 Fix aliyunlinux image building and testing error 2021-06-15 15:27:14 +08:00
Hui, Chunyang
41bbb3763d Fix dockerfile error 
1. Make "bash" the default shell when building image
2. Add libarchive dependency for centos image
 2021-06-11 16:26:30 +08:00
zongmin.gu
3756f0658c Update rust-toolchain to nightly-2020-10-25 2021-06-04 11:59:11 +08:00
zongmin.gu
437b6245d3 Check AESM status with aesm socket file 2021-06-03 10:54:37 +08:00