forked from intel/linux-sgx
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Makefile
561 lines (492 loc) · 26.2 KB
/
Makefile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
#
# Copyright (C) 2011-2021 Intel Corporation. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions
# are met:
#
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above copyright
# notice, this list of conditions and the following disclaimer in
# the documentation and/or other materials provided with the
# distribution.
# * Neither the name of Intel Corporation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#
#
include buildenv.mk
.PHONY: all preparation psw sdk clean rebuild sdk_install_pkg psw_install_pkg tdx
all: tips
tips:
@echo "Tips:"
@echo " This \"make\" command will show tips only and make nothing."
@echo " 1. If you want to build Intel(R) SGX SDK with default configuration, please take the following steps:"
@echo " 1) ensure that you have installed required tools described in README.md in same directory"
@echo " 2) enter the command: \"make sdk\""
@echo " 2. If you want to build Intel(R) SGX PSW with default configuration, please take the following steps:"
@echo " 1) ensure that you have installed additional required tools decribed in README.md in same directory"
@echo " 2) ensure that you have installed latest Intel(R) SGX SDK Installer which could be downloaded from: https://software.intel.com/en-us/sgx-sdk/download" and followed Installation Guide in the same page to finish installation.
@echo " 3) enter the commmand: \"make psw\""
@echo " 3. If you want to build other targets, please also follow README.md in same directory"
preparation:
# As SDK build needs to clone and patch openmp, we cannot support the mode that download the source from github as zip.
# Only enable the download from git
git submodule update --init --recursive
./external/dcap_source/QuoteVerification/prepare_sgxssl.sh nobuild
cd external/openmp/openmp_code && git apply ../0001-Enable-OpenMP-in-SGX.patch >/dev/null 2>&1 || git apply ../0001-Enable-OpenMP-in-SGX.patch --check -R
cd external/protobuf/protobuf_code && git apply ../sgx_protobuf.patch >/dev/null 2>&1 || git apply ../sgx_protobuf.patch --check -R
./external/sgx-emm/create_symlink.sh
cd external/mbedtls/mbedtls_code && git apply ../sgx_mbedtls.patch >/dev/null 2>&1 || git apply ../sgx_mbedtls.patch --check -R
cd external/cbor && cp -r libcbor sgx_libcbor
cd external/cbor/libcbor && git apply ../raw_cbor.patch >/dev/null 2>&1 || git apply ../raw_cbor.patch --check -R
cd external/cbor/sgx_libcbor && git apply ../sgx_cbor.patch >/dev/null 2>&1 || git apply ../sgx_cbor.patch --check -R
./download_prebuilt.sh
./external/dcap_source/QuoteGeneration/download_prebuilt.sh
psw:
$(MAKE) -C psw/ USE_OPT_LIBS=$(USE_OPT_LIBS)
sdk_no_mitigation:
$(MAKE) -C sdk/ USE_OPT_LIBS=$(USE_OPT_LIBS)
$(MAKE) -C external/dcap_source/QuoteVerification/dcap_tvl clean
$(MAKE) -C external/dcap_source/QuoteVerification/dcap_tvl
sdk:
$(MAKE) -C sdk/ clean
$(MAKE) -C sdk/ MODE=$(MODE) MITIGATION-CVE-2020-0551=LOAD
$(MAKE) -C sdk/ clean
$(MAKE) -C sdk/ MODE=$(MODE) MITIGATION-CVE-2020-0551=CF
$(MAKE) -C sdk/ clean
$(MAKE) -C sdk/ MODE=$(MODE)
$(MAKE) -C external/dcap_source/QuoteVerification/dcap_tvl MITIGATION-CVE-2020-0551=LOAD clean
$(MAKE) -C external/dcap_source/QuoteVerification/dcap_tvl MITIGATION-CVE-2020-0551=LOAD
$(MAKE) -C external/dcap_source/QuoteVerification/dcap_tvl MITIGATION-CVE-2020-0551=CF clean
$(MAKE) -C external/dcap_source/QuoteVerification/dcap_tvl MITIGATION-CVE-2020-0551=CF
$(MAKE) -C external/dcap_source/QuoteVerification/dcap_tvl clean
$(MAKE) -C external/dcap_source/QuoteVerification/dcap_tvl
tdx:
$(MAKE) -C external/dcap_source/QuoteGeneration pce_logic
$(MAKE) -C external/dcap_source/QuoteGeneration tdx_logic
$(MAKE) -C external/dcap_source/QuoteGeneration tdx_qgs
$(MAKE) -C external/dcap_source/QuoteGeneration tdx_attest
servtd_attest:
$(MAKE) -C sdk/ servtd_attest SERVTD_ATTEST=1
$(MAKE) -C external/dcap_source/QuoteGeneration servtd_attest
servtd_attest_preparation:
# Only enable the download from git
git submodule update --init --recursive external/dcap_source external/sgx-emm/emm_src
./external/sgx-emm/create_symlink.sh
./external/dcap_source/QuoteVerification/prepare_sgxssl.sh nobuild
# Generate SE SDK Install package
sdk_install_pkg_no_mitigation: sdk_no_mitigation
./linux/installer/bin/build-installpkg.sh sdk
sdk_install_pkg: sdk
./linux/installer/bin/build-installpkg.sh sdk cve-2020-0551
psw_install_pkg: psw
ifeq ("$(wildcard ./external/dcap_source/QuoteGeneration/psw/ae/data/prebuilt/libsgx_qe3.signed.so)", "")
./external/dcap_source/QuoteGeneration/download_prebuilt.sh
endif
ifeq ("$(wildcard ./external/dcap_source/QuoteGeneration/psw/ae/data/prebuilt/libsgx_id_enclave.signed.so)", "")
./external/dcap_source/QuoteGeneration/download_prebuilt.sh
endif
$(CP) external/dcap_source/QuoteGeneration/psw/ae/data/prebuilt/libsgx_qe3.signed.so $(BUILD_DIR)
$(CP) external/dcap_source/QuoteGeneration/psw/ae/data/prebuilt/libsgx_id_enclave.signed.so $(BUILD_DIR)
./linux/installer/bin/build-installpkg.sh psw
.PHONY: deb_libsgx_ae_qe3
deb_libsgx_ae_qe3:
ifeq ("$(wildcard ./external/dcap_source/QuoteGeneration/psw/ae/data/prebuilt/libsgx_qe3.signed.so)", "")
./external/dcap_source/QuoteGeneration/download_prebuilt.sh
endif
$(MAKE) -C external/dcap_source/QuoteGeneration deb_sgx_ae_qe3_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-ae-qe3/libsgx-ae-qe3*.deb ./linux/installer/deb/sgx-aesm-service/
.PHONY: deb_libsgx_ae_id_enclave
deb_libsgx_ae_id_enclave:
ifeq ("$(wildcard ./external/dcap_source/QuoteGeneration/psw/ae/data/prebuilt/libsgx_id_enclave.signed.so)", "")
./external/dcap_source/QuoteGeneration/download_prebuilt.sh
endif
$(MAKE) -C external/dcap_source/QuoteGeneration deb_sgx_ae_id_enclave_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-ae-id-enclave/libsgx-ae-id-enclave*.deb ./linux/installer/deb/sgx-aesm-service/
.PHONY: deb_libsgx_ae_tdqe deb_libsgx_tdx_logic deb_tdx_qgs deb_tdx_attest
ifeq ($(DISTR_ID)$(DISTR_VER),ubuntu18.04)
deb_libsgx_ae_tdqe:
echo "Skip tdqe in ubuntu 18.04"
deb_libsgx_tdx_logic:
echo "Skip tdx_logic in ubuntu 18.04"
deb_tdx_qgs:
echo "Skip tdx_qgs in ubuntu 18.04"
deb_tdx_attest:
echo "Skip tdx_attest in ubuntu 18.04"
else
deb_libsgx_ae_tdqe:
ifeq ("$(wildcard ./external/dcap_source/QuoteGeneration/psw/ae/data/prebuilt/libsgx_tdqe.signed.so)", "")
./external/dcap_source/QuoteGeneration/download_prebuilt.sh
endif
$(MAKE) -C external/dcap_source/QuoteGeneration deb_sgx_ae_tdqe_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-ae-tdqe/libsgx-ae-tdqe*.deb ./linux/installer/deb/sgx-aesm-service/
deb_libsgx_tdx_logic:
$(MAKE) -C external/dcap_source/QuoteGeneration deb_sgx_tdx_logic_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-tdx-logic/libsgx-tdx-logic*deb ./linux/installer/deb/sgx-aesm-service/
deb_tdx_qgs:
$(MAKE) -C external/dcap_source/QuoteGeneration deb_sgx_tdx_qgs_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/deb/tdx-qgs/tdx-qgs*deb ./linux/installer/deb/sgx-aesm-service/
deb_tdx_attest:
$(MAKE) -C external/dcap_source/QuoteGeneration deb_sgx_tdx_attest_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/deb/libtdx-attest/libtdx-attest*deb ./linux/installer/deb/sgx-aesm-service/
endif
.PHONY: deb_libsgx_qe3_logic
deb_libsgx_qe3_logic: psw
$(MAKE) -C external/dcap_source/QuoteGeneration deb_sgx_qe3_logic_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-qe3-logic/libsgx-qe3-logic*deb ./linux/installer/deb/sgx-aesm-service/
.PHONY: deb_libsgx_pce_logic
deb_libsgx_pce_logic: psw
$(MAKE) -C external/dcap_source/QuoteGeneration deb_sgx_pce_logic_pkg
$(CP) external/dcap_source/QuoteGeneration/build/linux/libsgx_pce_logic.so* $(BUILD_DIR)
$(CP) external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-pce-logic/libsgx-pce-logic*deb ./linux/installer/deb/sgx-aesm-service/
.PHONY: deb_sgx_aesm_service
deb_sgx_aesm_service: psw deb_libsgx_pce_logic
./linux/installer/deb/sgx-aesm-service/build.sh
.PHONY: deb_libsgx_epid
deb_libsgx_epid: psw
./linux/installer/deb/libsgx-epid/build.sh
.PHONY: deb_libsgx_launch
deb_libsgx_launch: psw
./linux/installer/deb/libsgx-launch/build.sh
.PHONY: deb_libsgx_quote_ex
deb_libsgx_quote_ex: psw
./linux/installer/deb/libsgx-quote-ex/build.sh
.PHONY: deb_libsgx_uae_service
deb_libsgx_uae_service: psw
./linux/installer/deb/libsgx-uae-service/build.sh
.PHONY: deb_libsgx_enclave_common
deb_libsgx_enclave_common: psw
./linux/installer/deb/libsgx-enclave-common/build.sh
.PHONY: deb_libsgx_urts
deb_libsgx_urts: psw
./linux/installer/deb/libsgx-urts/build.sh
.PHONY: deb_libsgx_headers_pkg
deb_libsgx_headers_pkg:
./linux/installer/deb/libsgx-headers/build.sh
ifeq ($(CC_BELOW_5_2), 1)
.PHONY: deb_psw_pkg
deb_psw_pkg: deb_libsgx_headers_pkg \
deb_libsgx_qe3_logic \
deb_libsgx_pce_logic \
deb_sgx_aesm_service \
deb_libsgx_epid \
deb_libsgx_launch \
deb_libsgx_quote_ex \
deb_libsgx_uae_service \
deb_libsgx_enclave_common \
deb_libsgx_urts \
deb_libsgx_ae_qe3 \
deb_libsgx_ae_tdqe \
deb_libsgx_ae_id_enclave \
deb_libsgx_tdx_logic \
deb_tdx_qgs deb_tdx_attest
else
.PHONY: deb_libsgx_dcap_default_qpl
deb_libsgx_dcap_default_qpl:
$(MAKE) -C external/dcap_source/QuoteGeneration deb_sgx_dcap_default_qpl_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-dcap-default-qpl/libsgx-dcap-default-qpl*deb ./linux/installer/deb/sgx-aesm-service/
.PHONY: deb_libsgx_dcap_pccs
deb_libsgx_dcap_pccs:
$(MAKE) -C external/dcap_source/QuoteGeneration deb_sgx_dcap_pccs_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/deb/sgx-dcap-pccs/sgx-dcap-pccs*deb ./linux/installer/deb/sgx-aesm-service/
.PHONY: deb_libsgx_dcap_ql
deb_libsgx_dcap_ql: deb_libsgx_pce_logic
$(MAKE) -C external/dcap_source/QuoteGeneration deb_sgx_dcap_ql_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-dcap-ql/libsgx-dcap-ql*deb ./linux/installer/deb/sgx-aesm-service/
.PHONY: deb_sgx_dcap_quote_verify
deb_sgx_dcap_quote_verify:
$(MAKE) -C external/dcap_source/QuoteGeneration deb_sgx_dcap_quote_verify_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-dcap-quote-verify/libsgx-dcap-quote-verify*deb ./linux/installer/deb/sgx-aesm-service/
.PHONY: deb_libsgx_ae_qve
deb_libsgx_ae_qve:
ifeq ("$(wildcard ./external/dcap_source/QuoteGeneration/psw/ae/data/prebuilt/libsgx_qve.signed.so)", "")
./external/dcap_source/QuoteGeneration/download_prebuilt.sh
endif
$(MAKE) -C external/dcap_source/QuoteGeneration deb_sgx_ae_qve_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-ae-qve/libsgx-ae-qve*deb ./linux/installer/deb/sgx-aesm-service/
.PHONY: deb_sgx_pck_id_retrieval_tool_pkg
deb_sgx_pck_id_retrieval_tool_pkg:
$(MAKE) -C external/dcap_source/QuoteGeneration deb_sgx_pck_id_retrieval_tool_pkg
$(CP) external/dcap_source/tools/PCKRetrievalTool/installer/deb/sgx-pck-id-retrieval-tool/sgx-pck-id-retrieval-tool*deb ./linux/installer/deb/sgx-aesm-service/
.PHONY: deb_sgx_ra_service_pkg
deb_sgx_ra_service_pkg:
$(MAKE) -C external/dcap_source/QuoteGeneration deb_sgx_ra_service_pkg
$(CP) external/dcap_source/tools/SGXPlatformRegistration/build/installer/sgx-ra-service*deb ./linux/installer/deb/sgx-aesm-service/
$(CP) external/dcap_source/tools/SGXPlatformRegistration/build/installer/libsgx-ra-*deb ./linux/installer/deb/sgx-aesm-service/
.PHONY: deb_tee_appraisal_tool
deb_tee_appraisal_tool:
$(MAKE) -C external/dcap_source/QuoteGeneration deb_tee_appraisal_tool_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/deb/tee-appraisal-tool/tee-appraisal-tool*deb ./linux/installer/deb/sgx-aesm-service/
.PHONY: deb_psw_pkg
deb_psw_pkg: deb_libsgx_headers_pkg \
deb_libsgx_qe3_logic \
deb_libsgx_pce_logic \
deb_sgx_aesm_service \
deb_libsgx_epid \
deb_libsgx_launch \
deb_libsgx_quote_ex \
deb_libsgx_uae_service \
deb_libsgx_enclave_common \
deb_libsgx_urts \
deb_libsgx_ae_qe3 \
deb_libsgx_ae_id_enclave \
deb_libsgx_dcap_default_qpl \
deb_libsgx_dcap_pccs \
deb_libsgx_dcap_ql \
deb_libsgx_ae_qve \
deb_sgx_dcap_quote_verify \
deb_sgx_pck_id_retrieval_tool_pkg \
deb_sgx_ra_service_pkg \
deb_libsgx_ae_tdqe \
deb_libsgx_tdx_logic \
deb_tdx_qgs \
deb_tdx_attest \
deb_tee_appraisal_tool
endif
.PHONY: deb_local_repo
deb_local_repo: deb_psw_pkg
./linux/installer/common/local_repo_builder/local_repo_builder.sh debian build
.PHONY: rpm_libsgx_ae_qe3
rpm_libsgx_ae_qe3:
ifeq ("$(wildcard ./external/dcap_source/QuoteGeneration/psw/ae/data/prebuilt/libsgx_qe3.signed.so)", "")
./external/dcap_source/QuoteGeneration/download_prebuilt.sh
endif
$(MAKE) -C external/dcap_source/QuoteGeneration rpm_sgx_ae_qe3_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-ae-qe3/libsgx-ae-qe3*.rpm ./linux/installer/rpm/sgx-aesm-service/
.PHONY: rpm_libsgx_ae_tdqe
rpm_libsgx_ae_tdqe:
ifeq ("$(wildcard ./external/dcap_source/QuoteGeneration/psw/ae/data/prebuilt/libsgx_tdqe.signed.so)", "")
./external/dcap_source/QuoteGeneration/download_prebuilt.sh
endif
$(MAKE) -C external/dcap_source/QuoteGeneration rpm_sgx_ae_tdqe_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-ae-tdqe/libsgx-ae-tdqe*.rpm ./linux/installer/rpm/sgx-aesm-service/
.PHONY: rpm_libsgx_ae_id_enclave
rpm_libsgx_ae_id_enclave:
ifeq ("$(wildcard ./external/dcap_source/QuoteGeneration/psw/ae/data/prebuilt/libsgx_id_enclave.signed.so)", "")
./external/dcap_source/QuoteGeneration/download_prebuilt.sh
endif
$(MAKE) -C external/dcap_source/QuoteGeneration rpm_sgx_ae_id_enclave_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-ae-id-enclave/libsgx-ae-id-enclave*.rpm ./linux/installer/rpm/sgx-aesm-service/
.PHONY: rpm_libsgx_tdx_logic
rpm_libsgx_tdx_logic:
$(MAKE) -C external/dcap_source/QuoteGeneration rpm_sgx_tdx_logic_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-tdx-logic/libsgx-tdx-logic*.rpm ./linux/installer/rpm/sgx-aesm-service/
.PHONY: rpm_tdx_qgs
rpm_tdx_qgs:
$(MAKE) -C external/dcap_source/QuoteGeneration rpm_sgx_tdx_qgs_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/rpm/tdx-qgs/tdx-qgs*.rpm ./linux/installer/rpm/sgx-aesm-service/
.PHONY: rpm_tdx_attest
rpm_tdx_attest:
$(MAKE) -C external/dcap_source/QuoteGeneration rpm_sgx_tdx_attest_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/rpm/libtdx-attest/libtdx-attest*.rpm ./linux/installer/rpm/sgx-aesm-service/
.PHONY: rpm_libsgx_pce_logic
rpm_libsgx_pce_logic: psw
$(MAKE) -C external/dcap_source/QuoteGeneration rpm_sgx_pce_logic_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-pce-logic/libsgx-pce-logic*.rpm ./linux/installer/rpm/sgx-aesm-service/
.PHONY: rpm_libsgx_qe3_logic
rpm_libsgx_qe3_logic: psw
$(MAKE) -C external/dcap_source/QuoteGeneration rpm_sgx_qe3_logic_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-qe3-logic/libsgx-qe3-logic*.rpm ./linux/installer/rpm/sgx-aesm-service/
.PHONY: rpm_sgx_aesm_service
rpm_sgx_aesm_service: psw
./linux/installer/rpm/sgx-aesm-service/build.sh
.PHONY: rpm_libsgx_epid
rpm_libsgx_epid: psw
./linux/installer/rpm/libsgx-epid/build.sh
.PHONY: rpm_libsgx_launch
rpm_libsgx_launch: psw
./linux/installer/rpm/libsgx-launch/build.sh
.PHONY: rpm_libsgx_quote_ex
rpm_libsgx_quote_ex: psw
./linux/installer/rpm/libsgx-quote-ex/build.sh
.PHONY: rpm_libsgx_uae_service
rpm_libsgx_uae_service: psw
./linux/installer/rpm/libsgx-uae-service/build.sh
.PHONY: rpm_libsgx_enclave_common
rpm_libsgx_enclave_common: psw
./linux/installer/rpm/libsgx-enclave-common/build.sh
.PHONY: rpm_libsgx_urts
rpm_libsgx_urts: psw
./linux/installer/rpm/libsgx-urts/build.sh
.PHONY: rpm_sdk_pkg
rpm_sdk_pkg: sdk
./linux/installer/rpm/sdk/build.sh
.PHONY: rpm_libsgx_headers_pkg
rpm_libsgx_headers_pkg:
./linux/installer/rpm/libsgx-headers/build.sh
ifeq ($(CC_BELOW_5_2), 1)
.PHONY: rpm_psw_pkg
rpm_psw_pkg: rpm_libsgx_headers_pkg \
rpm_libsgx_pce_logic \
rpm_libsgx_qe3_logic \
rpm_sgx_aesm_service \
rpm_libsgx_epid \
rpm_libsgx_launch \
rpm_libsgx_quote_ex \
rpm_libsgx_uae_service \
rpm_libsgx_enclave_common \
rpm_libsgx_urts \
rpm_libsgx_ae_qe3 \
rpm_libsgx_ae_tdqe \
rpm_libsgx_ae_id_enclave \
rpm_libsgx_tdx_logic \
rpm_tdx_qgs \
rpm_tdx_attest
else
.PHONY: rpm_libsgx_dcap_default_qpl
rpm_libsgx_dcap_default_qpl:
$(MAKE) -C external/dcap_source/QuoteGeneration rpm_sgx_dcap_default_qpl_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-dcap-default-qpl/libsgx-dcap-default-qpl*.rpm ./linux/installer/rpm/sgx-aesm-service/
.PHONY: rpm_libsgx_dcap_pccs
rpm_libsgx_dcap_pccs:
$(MAKE) -C external/dcap_source/QuoteGeneration rpm_sgx_dcap_pccs_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/rpm/sgx-dcap-pccs/sgx-dcap-pccs*.rpm ./linux/installer/rpm/sgx-aesm-service/
.PHONY: rpm_libsgx_dcap_ql
rpm_libsgx_dcap_ql:
$(MAKE) -C external/dcap_source/QuoteGeneration rpm_sgx_dcap_ql_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-dcap-ql/libsgx-dcap-ql*rpm ./linux/installer/rpm/sgx-aesm-service/
.PHONY: rpm_libsgx_ae_qve
rpm_libsgx_ae_qve:
ifeq ("$(wildcard ./external/dcap_source/QuoteGeneration/psw/ae/data/prebuilt/libsgx_qve.signed.so)", "")
./external/dcap_source/QuoteGeneration/download_prebuilt.sh
endif
$(MAKE) -C external/dcap_source/QuoteGeneration rpm_sgx_ae_qve_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-ae-qve/libsgx-ae-qve*rpm ./linux/installer/rpm/sgx-aesm-service/
.PHONY: rpm_sgx_dcap_quote_verify
rpm_sgx_dcap_quote_verify:
$(MAKE) -C external/dcap_source/QuoteGeneration rpm_sgx_dcap_quote_verify_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-dcap-quote-verify/libsgx-dcap-quote-verify*rpm ./linux/installer/rpm/sgx-aesm-service/
.PHONY: rpm_sgx_pck_id_retrieval_tool_pkg
rpm_sgx_pck_id_retrieval_tool_pkg:
$(MAKE) -C external/dcap_source/QuoteGeneration rpm_sgx_pck_id_retrieval_tool_pkg
$(CP) external/dcap_source/tools/PCKRetrievalTool/installer/rpm/sgx-pck-id-retrieval-tool/sgx-pck-id-retrieval-tool*rpm ./linux/installer/rpm/sgx-aesm-service/
.PHONY: rpm_sgx_ra_service_pkg
rpm_sgx_ra_service_pkg:
$(MAKE) -C external/dcap_source/QuoteGeneration rpm_sgx_ra_service_pkg
$(CP) external/dcap_source/tools/SGXPlatformRegistration/build/installer/sgx-ra-service*rpm ./linux/installer/rpm/sgx-aesm-service/
$(CP) external/dcap_source/tools/SGXPlatformRegistration/build/installer/libsgx-ra-*rpm ./linux/installer/rpm/sgx-aesm-service/
.PHONY: rpm_tee_appraisal_tool
rpm_tee_appraisal_tool:
$(MAKE) -C external/dcap_source/QuoteGeneration rpm_tee_appraisal_tool_pkg
$(CP) external/dcap_source/QuoteGeneration/installer/linux/rpm/tee-appraisal-tool/tee-appraisal-tool*rpm ./linux/installer/rpm/sgx-aesm-service/
.PHONY: rpm_psw_pkg
rpm_psw_pkg: rpm_libsgx_headers_pkg \
rpm_libsgx_pce_logic \
rpm_libsgx_qe3_logic \
rpm_sgx_aesm_service \
rpm_libsgx_epid \
rpm_libsgx_launch \
rpm_libsgx_quote_ex \
rpm_libsgx_uae_service \
rpm_libsgx_enclave_common \
rpm_libsgx_urts \
rpm_libsgx_ae_qe3 \
rpm_libsgx_ae_id_enclave \
rpm_libsgx_dcap_default_qpl \
rpm_libsgx_dcap_pccs \
rpm_libsgx_dcap_ql \
rpm_libsgx_ae_qve \
rpm_sgx_dcap_quote_verify \
rpm_sgx_pck_id_retrieval_tool_pkg \
rpm_sgx_ra_service_pkg \
rpm_libsgx_ae_tdqe \
rpm_libsgx_tdx_logic \
rpm_tdx_qgs \
rpm_tdx_attest \
rpm_tee_appraisal_tool
endif
.PHONY: rpm_local_repo
rpm_local_repo: rpm_psw_pkg
./linux/installer/common/local_repo_builder/local_repo_builder.sh rpm build
clean:
@$(MAKE) -C sdk/ clean
@$(MAKE) -C psw/ clean
@$(RM) -r $(ROOT_DIR)/build
@$(RM) -r linux/installer/bin/install-sgx-*.bin*.withLicense
@$(RM) -r linux/installer/bin/sgx_linux*.bin
@$(RM) -f ./linux/installer/deb/sgx-aesm-service/sgx-dcap-pccs*deb
@$(RM) -f ./linux/installer/rpm/sgx-aesm-service/sgx-dcap-pccs*rpm
./linux/installer/deb/sgx-aesm-service/clean.sh
./linux/installer/deb/libsgx-epid/clean.sh
./linux/installer/deb/libsgx-launch/clean.sh
./linux/installer/deb/libsgx-quote-ex/clean.sh
./linux/installer/deb/libsgx-uae-service/clean.sh
./linux/installer/deb/libsgx-enclave-common/clean.sh
./linux/installer/deb/libsgx-urts/clean.sh
./linux/installer/deb/libsgx-headers/clean.sh
./linux/installer/common/local_repo_builder/local_repo_builder.sh debian clean
./linux/installer/rpm/sgx-aesm-service/clean.sh
./linux/installer/rpm/libsgx-epid/clean.sh
./linux/installer/rpm/libsgx-launch/clean.sh
./linux/installer/rpm/libsgx-quote-ex/clean.sh
./linux/installer/rpm/libsgx-uae-service/clean.sh
./linux/installer/rpm/libsgx-enclave-common/clean.sh
./linux/installer/rpm/libsgx-urts/clean.sh
./linux/installer/rpm/libsgx-headers/clean.sh
./linux/installer/rpm/sdk/clean.sh
./linux/installer/common/local_repo_builder/local_repo_builder.sh rpm clean
ifeq ("$(shell test -f external/dcap_source/QuoteVerification/dcap_tvl/Makefile && echo TVL Makefile exists)", "TVL Makefile exists")
$(MAKE) -C external/dcap_source/QuoteVerification/dcap_tvl MITIGATION-CVE-2020-0551=LOAD clean
$(MAKE) -C external/dcap_source/QuoteVerification/dcap_tvl MITIGATION-CVE-2020-0551=CF clean
$(MAKE) -C external/dcap_source/QuoteVerification/dcap_tvl clean
endif
ifeq ("$(shell test -f external/dcap_source/QuoteVerification/Makefile && echo Makefile exists)", "Makefile exists")
@$(MAKE) -C external/dcap_source/QuoteVerification clean
@$(MAKE) -C external/dcap_source/QuoteGeneration clean
./external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-ae-qve/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-ae-qe3/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-ae-id-enclave/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-ae-tdqe/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-tdx-logic/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/deb/libtdx-attest/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/deb/tdx-qgs/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-dcap-default-qpl/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-dcap-ql/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-pce-logic/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-qe3-logic/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/deb/libsgx-dcap-quote-verify/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/deb/sgx-dcap-pccs/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/deb/tee-appraisal-tool/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-ae-qve/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-ae-qe3/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-ae-id-enclave/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-ae-tdqe/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-tdx-logic/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/rpm/libtdx-attest/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/rpm/tdx-qgs/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-dcap-default-qpl/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-dcap-ql/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-pce-logic/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-qe3-logic/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/rpm/libsgx-dcap-quote-verify/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/rpm/sgx-dcap-pccs/clean.sh
./external/dcap_source/QuoteGeneration/installer/linux/rpm/tee-appraisal-tool/clean.sh
endif
rebuild:
$(MAKE) clean
$(MAKE) all
.PHONY: distclean
distclean:
$(MAKE) clean
# Cleanup
$(RM) -r 'Intel redistributable binary.txt' Master_EULA_for_Intel_Sw_Development_Products.pdf redist.txt
$(RM) -rf external/ippcp_internal/inc/*.h external/ippcp_internal/lib/ external/ippcp_internal/license
$(RM) -rf external/toolset psw/ae/data/prebuilt/lib*.so psw/ae/data/prebuilt/README.md
$(RM) -rf external/dcap_source/QuoteGeneration/psw/ae/data/prebuilt/
$(RM) -rf external/dcap_source/QuoteGeneration/'Intel redistributable binary.txt'
$(RM) -rf external/dcap_source/QuoteVerification/sgxssl/
git submodule deinit --all -f