mirror of
https://github.com/intel/linux-sgx
synced 2026-06-08 14:49:32 +00:00
Li, Xun
c505e6129a
Added support for Reproducible Enclave Build using Docker file. Added support for Intel AVX-512 instructions and Intel SHA Extensions New Instructions (SHA-NI) in trusted libraries. Support both EPID and ECDSA based quote for quoting related interfaces in sgx_uae_service library. Updated key exchange library to support both EPID and ECDSA based remote attestation. Support new interface to check platform information blob from remote attestation response message. Fixed bugs. Signed-off-by: Li, Xun <xun.li@intel.com>
73 lines
3.2 KiB
Docker
73 lines
3.2 KiB
Docker
FROM ubuntu:18.04
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y curl python\
|
|
&& mkdir -p /nix /etc/nix \
|
|
&& chmod a+rwx /nix \
|
|
&& echo 'sandbox = false' > /etc/nix/nix.conf \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
#add a user for Nix
|
|
RUN adduser user --home /home/user --disabled-password --gecos "" --shell /bin/bash
|
|
CMD /bin/bash -l
|
|
USER user
|
|
ENV USER user
|
|
WORKDIR /home/user
|
|
|
|
#create the shell config
|
|
RUN echo "{ pkgs ? import <nixpkgs> {} }: \n\
|
|
with pkgs; \n\
|
|
\n\
|
|
stdenv.mkDerivation { \n\
|
|
\tname = \"sgx-build-nix\"; \n\
|
|
\tbuildInputs = [ \n\
|
|
\t\t/nix/store/raiq8qv61rc66arg3vzyfr9kw83s7dwv-autoconf-2.69 \n\
|
|
\t\t/nix/store/7bsq9c4z657hddv60hpks48ws699y0fc-automake-1.16.1 \n\
|
|
\t\t/nix/store/idj0yrdlk8x49f3gyl4sb8divwhfgjvp-libtool-2.4.6 \n\
|
|
\t\t/nix/store/68yb6ams241kf5pjyxiwd7a98xxcbx0r-ocaml-4.06.1 \n\
|
|
\t\t/nix/store/ncqmw9iybd6iwxd4yk1x57gvs76k1sq4-ocamlbuild-0.12.0 \n\
|
|
\t\t/nix/store/9dkhfaw1qsmvw4rv1z1fqgwhfpbdqrn0-file-5.35 \n\
|
|
\t\t/nix/store/lw4xr0x2p6xyfgbk961lxh8vnnx7vn2r-cmake-3.12.1 \n\
|
|
\t\t/nix/store/d0fv0g4vcv4s0ysa81pn9sf6fy4zzjcv-gnum4-1.4.18 \n\
|
|
\t\t/nix/store/pm4rg0bdiaj5b748kncp9vf7n3x446sd-gcc-7.4.0 \n\
|
|
\t\t/nix/store/ljvpvjh36h9x2aaqzaby5clclq4mgdmc-openssl-1.1.1b \n\
|
|
\t\t/nix/store/5lyvydxv0w4f2s1ba84pjlbpvqkgn1ni-linux-headers-4.19.16 \n\
|
|
\t\t/nix/store/681354n3k44r8z90m35hm8945vsp95h1-glibc-2.27 \n\
|
|
\t\t/nix/store/0klr6d4k2g0kabkamfivg185wpx8biqv-openssl-1.1.1b-dev \n\
|
|
\t\t/nix/store/plfjikpsq548dlvsv9k8zmqqrpa8vkyj-numactl-2.0.12 \n\
|
|
\t\t/nix/store/1kl6ms8x56iyhylb2r83lq7j3jbnix7w-binutils-2.31.1 \n\
|
|
\t\t/nix/store/yg76yir7rkxkfz6p77w4vjasi3cgc0q6-gnumake-4.2.1 \n\
|
|
\t\t/nix/store/5lyvydxv0w4f2s1ba84pjlbpvqkgn1ni-linux-headers-4.19.16 \n\
|
|
\t]; \n\
|
|
\n\
|
|
\tshellHook = '' \n\
|
|
\techo \"SGX build enviroment\" \n\
|
|
\t''; \n\
|
|
} \n\
|
|
" > /home/user/shell.nix
|
|
|
|
#install the required software
|
|
RUN touch .bash_profile \
|
|
&& curl https://nixos.org/releases/nix/nix-2.2.1/install | sh \
|
|
&& . /home/user/.nix-profile/etc/profile.d/nix.sh \
|
|
&& nix-env -i /nix/store/1kl6ms8x56iyhylb2r83lq7j3jbnix7w-binutils-2.31.1 \
|
|
&& nix-env -i /nix/store/raiq8qv61rc66arg3vzyfr9kw83s7dwv-autoconf-2.69 \
|
|
&& nix-env -i /nix/store/7bsq9c4z657hddv60hpks48ws699y0fc-automake-1.16.1 \
|
|
&& nix-env -i /nix/store/idj0yrdlk8x49f3gyl4sb8divwhfgjvp-libtool-2.4.6 \
|
|
&& nix-env -i /nix/store/68yb6ams241kf5pjyxiwd7a98xxcbx0r-ocaml-4.06.1 \
|
|
&& nix-env -i /nix/store/ncqmw9iybd6iwxd4yk1x57gvs76k1sq4-ocamlbuild-0.12.0 \
|
|
&& nix-env -i /nix/store/9dkhfaw1qsmvw4rv1z1fqgwhfpbdqrn0-file-5.35 \
|
|
&& nix-env -i /nix/store/lw4xr0x2p6xyfgbk961lxh8vnnx7vn2r-cmake-3.12.1 \
|
|
&& nix-env -i /nix/store/d0fv0g4vcv4s0ysa81pn9sf6fy4zzjcv-gnum4-1.4.18 \
|
|
&& nix-env -i /nix/store/pm4rg0bdiaj5b748kncp9vf7n3x446sd-gcc-7.4.0 \
|
|
&& nix-env -i /nix/store/ljvpvjh36h9x2aaqzaby5clclq4mgdmc-openssl-1.1.1b \
|
|
&& nix-env -i /nix/store/5lyvydxv0w4f2s1ba84pjlbpvqkgn1ni-linux-headers-4.19.16 \
|
|
&& nix-env -i /nix/store/681354n3k44r8z90m35hm8945vsp95h1-glibc-2.27 \
|
|
&& nix-env -i /nix/store/0klr6d4k2g0kabkamfivg185wpx8biqv-openssl-1.1.1b-dev \
|
|
&& nix-env -i /nix/store/yg76yir7rkxkfz6p77w4vjasi3cgc0q6-gnumake-4.2.1 \
|
|
&& nix-env -i /nix/store/plfjikpsq548dlvsv9k8zmqqrpa8vkyj-numactl-2.0.12
|
|
|
|
#config nix-shell
|
|
RUN . /home/user/.nix-profile/etc/profile.d/nix.sh \
|
|
&& nix-shell
|