[rte-252] ppid_retrieval runtime container #675
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Taowyoo
reviewed
Dec 18, 2024
| RUN echo 92f96f84281031d889deb81060c44325f0481aee621ae47a15ae1df4431b4a23 intel-sgx-deb.key | sha256sum -c | ||
| RUN cat intel-sgx-deb.key | sudo tee /etc/apt/keyrings/intel-sgx-keyring.asc > /dev/null | ||
| RUN apt-get update | ||
| RUN apt-get install -y libsgx-urts |
There was a problem hiding this comment.
Another approach is using the pre-built dynamic libraries in https://download.01.org/intel-sgx/latest/dcap-latest/linux/distro/ubuntu24.04-server/PCKIDRetrievalTool_v1.22.100.3.tar.gz
There was a problem hiding this comment.
~/Downloads/PCKIDRetrievalTool_v1.22.100.3
> ls
libmpa_uefi.so.1 libsgx_pce.signed.so.1 network_setting.conf
libsgx_enclave_common.so.1 libsgx_urts.so PCKIDRetrievalTool
libsgx_id_enclave.signed.so.1 License.txt README.txt
There was a problem hiding this comment.
For build stage , current approach is fine.
But for run stage below, I suggest to use this
| RUN apt-get install -y libsgx-urts | ||
|
|
||
| # Install ppid_retrieval tool | ||
| COPY --from=ppid_retrieval_dev /opt/intel/ppid-tool/ppid_retrieval /ppid_retrieval |
There was a problem hiding this comment.
Is it intentional to use root path in line 62-67?
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There already was a Docker container to build the ppid_retrieval tool, but not a minimal container to run it. This PR adds just that. It also does the following (each as a separate, independent commit):
ppid_retrievalimageppid_retrievaltool to facilitate scriptingppid_retrievaltool and version tag