1. Add Occlum.json as Occlum's config file 2. Add tools/bin/build_enclave 3. Add tools/bin/protect_integrity 4. Validate Occlum.json.protected on LibOS startup 5. Parse Occlum.json.protected on LibOS startup 6. Config enclave size using Occlum.json 7. Config process memory sizes using Occlum.json
36 lines
779 B
JSON
36 lines
779 B
JSON
{
|
|
"vm": {
|
|
"user_space_size": "128MB"
|
|
},
|
|
"process": {
|
|
"default_stack_size": "4MB",
|
|
"default_heap_size": "16MB",
|
|
"default_mmap_size": "32MB"
|
|
},
|
|
"mount": [
|
|
{
|
|
"target": "/",
|
|
"type": "sefs",
|
|
"source": "./root_sefs"
|
|
},
|
|
{
|
|
"target": "/bin",
|
|
"type": "sefs",
|
|
"source": "./bin_sefs",
|
|
"options": {
|
|
"integrity_only": true,
|
|
"MAC": "00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-"
|
|
}
|
|
},
|
|
{
|
|
"target": "/host",
|
|
"type": "hostfs",
|
|
"source": "."
|
|
},
|
|
{
|
|
"target": "/tmp",
|
|
"type": "ramfs"
|
|
}
|
|
]
|
|
}
|