Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat(sgx): put all python packages into trusted_files #1095

Merged
merged 8 commits into from
Apr 8, 2024
Merged

feat(sgx): put all python packages into trusted_files #1095

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
32d5e9e
feat(sgx): support tensorflow remote attestation in list
zeuson0 Apr 1, 2024
5940cbc
fix(sgx): improve EPC cost
zeuson0 Apr 3, 2024
f17dedb
fix(sgx): fix memory leak of json_engine
zeuson0 Apr 3, 2024
0d48c97
fix(sgx):misspell Ps->ps
zeuson0 Apr 7, 2024
4ce1196
Merge branch 'bytedance:fix_dev_sgx' into fix_dev_sgx
zeuson0 Apr 8, 2024
729b20a
Merge branch 'bytedance:fix_dev_sgx' into fix_dev_sgx
zeuson0 Apr 8, 2024
1839c29
fix(sgx): fix get_token
zeuson0 Apr 8, 2024
3e5f422
feat(sgx): put all python packages into trusted_files
zeuson0 Apr 8, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
37 changes: 28 additions & 9 deletions deploy/scripts/sgx/get_token.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,11 +1,30 @@
#!/bin/bash

cd /gramine/CI-Examples/generate-token/
make clean > /dev/null
export SGX=1
export SGX_SIGNER_KEY=/root/.config/gramine/enclave-key.pem
make all > /dev/null
if [ $? -eq 0 ]; then
gramine-sgx-get-token -s python.sig -o /dev/null
fi
make clean > /dev/null
function get_token(){
local need_clean=0
cd /gramine/CI-Examples/generate-token/
make clean > /dev/null
export SGX=1
export SGX_SIGNER_KEY=/root/.config/gramine/enclave-key.pem

# mkdir and make
if [ ! -d "/gramine/leader" ] || [ ! -d "/gramine/follower" ]; then
mkdir -p /gramine/leader
mkdir -p /gramine/follower
need_clean=1
fi
make all > /dev/null
if [ $? -eq 0 ]; then
gramine-sgx-get-token -s python.sig -o /dev/null
fi

# clean
make clean > /dev/null
if [ $need_clean==1 ]; then
rm -rf /gramine/leader
rm -rf /gramine/follower
fi
cd -
}

get_token
6 changes: 3 additions & 3 deletions sgx/gramine/CI-Examples/generate-token/python.manifest.template
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -67,6 +67,9 @@ sgx.trusted_files = [
"file:/usr/{{ arch_libdir }}/",
"file:/etc/ssl/certs/ca-certificates.crt",
"file:/etc/default/apport",
"file:/usr/local/lib/",
"file:{{ python.stdlib }}/",
"file:{{ python.distlib }}/",
"file:/etc/mime.types",
"file:/gramine/leader/",
"file:/gramine/follower/"
Expand All @@ -76,8 +79,6 @@ sgx.allowed_files = [
"file:tensorflow_io.py",
"file:/opt/tiger/",
"file:/opt/meituan/",
"file:{{ python.stdlib }}/",
"file:{{ python.distlib }}/",
"file:/usr/lib/ssl/openssl.cnf",
"file:/usr/lib/gcc",
"file:/etc/ethers",
Expand All @@ -99,7 +100,6 @@ sgx.allowed_files = [
"file:/root/.keras/keras.json",
"file:dynamic_config.json",
"file:/usr/bin/",
"file:/usr/local/lib",
"file:/lib/",
"file:/bin/",
"file:/data/",
Expand Down
Loading