Amnesic-Systems / nitriding

Tool kit for building secure, scalable, and networked services on top of AWS Nitro Enclaves.
Mozilla Public License 2.0
2 stars 2 forks source link

Teach nitriding to act as a boot loader #12

Open NullHypothesis opened 10 months ago

NullHypothesis commented 10 months ago

For some use cases, we want the ability to load an enclave application at runtime. This can happen in various ways, like via an HTTP API (e.g., we PUT a new enclave application whenever needed) or via Docker (e.g., nitriding fetches the enclave application from a Docker registry).

Ideally, nitriding should also have the ability to maintain an append-only log that keeps track of the evolution of enclave applications over time. Perhaps we can also take advantage of Sigsum to make this append-only log permanent.