search

aws / aws-nitro-enclaves-cli

Tooling for Nitro Enclave Management
Apache License 2.0
116 stars 78 forks source link

Nitro Enclaves runs out of memory after a lot of traffic #550

Open agraf opened 8 months ago

agraf commented 8 months ago

After a lot of vsock traffic, an enclave may run out of memory and start killing processes.

DJAndries commented 1 week ago

hey @agraf , any luck on getting the patch accepted into kernel upstream?

agraf commented 1 week ago

The NSM driver is part of upstream Linux since v6.8. We are currently working on a reproducible build environment for the Linux kernel that will combine an update to the kernel binary with the ability for everyone to bit for bot reason about how we reached the artifact. It will be analogous to our LinuxKit update.

Reassigning to @foersleo to update this issue when the kernel update lands.