edgelesssys / marblerun

MarbleRun is the control plane for confidential computing. Deploy, scale, and verify your confidential microservices on vanilla Kubernetes. 100% Go, 100% cloud native, 100% confidential.
https://marblerun.sh
Other
238 stars 34 forks source link

[ SGX SDK] Does Marblerun have intel sgx sdk support? #277

Open piaolaidelangman opened 2 years ago

piaolaidelangman commented 2 years ago

Hi team! I wonder whether Marblerun has intel sgx sdk support or not. I only see openenclave in some examples. Thanks!

m1ghtym0 commented 2 years ago

Hey @piaolaidelangman, Currently, we have support for EdgelessRT, EGo, Gramine/Graphene, and Occlum. Would you like to see support for the Intel SGX SDK?

piaolaidelangman commented 2 years ago

Hi! That would be better if you can support Intel SGX SDK. Feel free to close this issue. Thanks!

m1ghtym0 commented 2 years ago

@piaolaidelangman would you be interested in contributing Intel SGX SDK support to this project?

piaolaidelangman commented 2 years ago

I'd like to, but I'm just an intern and ...... Thanks and sorry......

m1ghtym0 commented 2 years ago

I see, no worries! Can you tell me more about your usage of MarbleRun, is the SDK support an import requirement for you to use MarbleRun? I'd like to understand if we should prioritize adding support for the SDK on our roadmap.

piaolaidelangman commented 2 years ago

We have a distributed app and want to run in k8s with sgx, but the attestation in k8s is a little difficult, and that's what we hope marblerun could solve. Some code is written in sgx sdk and some is gramine so we want sgx sdk support.

m1ghtym0 commented 2 years ago

Sorry for the super later reply. Thank you for clarifying! Having Intel SDK support would be great to have. I'll keep this issue open and see if someone is willing to implement it.