aws / aws-nitro-enclaves-cli

Tooling for Nitro Enclave Management
Apache License 2.0
121 stars 81 forks source link

How do I install nitro-enclaves-acm on Ubuntu 22.04? #415

Closed a-hiroyuki closed 1 year ago

a-hiroyuki commented 1 year ago

On Amazon Linux 2, I was able to get there with the following command.

[ec2-user@ip-192-168-1-133 nitro_enclaves]$ sudo yum install aws-nitro-enclaves-acm
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd
amzn2-core                                                                                                      | 3.7 kB  00:00:00
Resolving Dependencies
--> Running transaction check
---> Package aws-nitro-enclaves-acm.aarch64 0:1.2.0-2.amzn2 will be installed
--> Processing Dependency: openssl-pkcs11 for package: aws-nitro-enclaves-acm-1.2.0-2.amzn2.aarch64
--> Running transaction check
---> Package openssl-pkcs11.aarch64 0:0.4.10-3.amzn2.0.1 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

=======================================================================================================================================
 Package                           Arch               Version                       Repository                                    Size
=======================================================================================================================================
Installing:
 aws-nitro-enclaves-acm            aarch64            1.2.0-2.amzn2                 amzn2extra-aws-nitro-enclaves-cli            7.2 M
Installing for dependencies:
 openssl-pkcs11                    aarch64            0.4.10-3.amzn2.0.1            amzn2-core                                    62 k

Transaction Summary
=======================================================================================================================================
Install  1 Package (+1 Dependent package)

Total download size: 7.3 M
Installed size: 21 M
Is this ok [y/d/N]: y
Downloading packages:
(1/2): openssl-pkcs11-0.4.10-3.amzn2.0.1.aarch64.rpm                                                            |  62 kB  00:00:00
(2/2): aws-nitro-enclaves-acm-1.2.0-2.amzn2.aarch64.rpm                                                         | 7.2 MB  00:00:00
---------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                   30 MB/s | 7.3 MB  00:00:00
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Installing : openssl-pkcs11-0.4.10-3.amzn2.0.1.aarch64                                                                           1/2
  Installing : aws-nitro-enclaves-acm-1.2.0-2.amzn2.aarch64                                                                        2/2
  Verifying  : openssl-pkcs11-0.4.10-3.amzn2.0.1.aarch64                                                                           1/2
  Verifying  : aws-nitro-enclaves-acm-1.2.0-2.amzn2.aarch64                                                                        2/2

Installed:
  aws-nitro-enclaves-acm.aarch64 0:1.2.0-2.amzn2

Dependency Installed:
  openssl-pkcs11.aarch64 0:0.4.10-3.amzn2.0.1

Complete!

However, I know that on Ubuntu I need to make and install the service https://github.com/aws/aws-nitro-enclaves-cli/blob/main/docs/ubuntu_20.04_how_to_install_nitro_cli_from_github_sources.md

I think the ACM settings are missing in this section. ex )

$ export NITRO_CLI_INSTALL_DIR=/

$ make nitro-cli

$ make vsock-proxy

$ sudo make NITRO_CLI_INSTALL_DIR=/ install

$ source /etc/profile.d/nitro-cli-env.sh

$ echo source /etc/profile.d/nitro-cli-env.sh >> ~/.bashrc

$ nitro-cli-config -i

Can someone support me?

alcioa commented 1 year ago

Hi,

We only released ACM for Nitro Enclaves on AL2 and while the Nitro CLI can work on Ubuntu, this is a different matter as there are some other packages which require updates as well as .rpm to .deb translation.

Can you open an issue in https://github.com/aws/aws-nitro-enclaves-acm to continue the discussion there?

a-hiroyuki commented 1 year ago

@alcioa Thanks for the reply. I opened a new issue.

alcioa commented 1 year ago

Tracking in https://github.com/aws/aws-nitro-enclaves-acm/issues/67 as this is already a hard dependency for that feature.