mkow
commented
3 years ago In this particular case the culprit is this line: sgx.protected_files.dbfile = "file:/tmp/test.db", or rather what you're trying to do. Graphene currently doesn't support R/W protected files, you can either read one or write, but not both at the same time. This is due to challenges in cryptographically securing such files against replay attacks.
Fortunately, if your database doesn't need to be persistent across enclave runs, then you can store it in tmpfs (in-memory mount), see https://graphene.readthedocs.io/en/latest/manifest-syntax.html#fs-mount-points.
p.s. In the future, you can usually trace down such issues yourself by raising log_level in the manifest to "debug" or "trace" and checking what exactly is failing.
Keepmoving-ZXY
dimakuv
Description of the problem
I am working on run SQLite on Graphene, according to my two day's work, the compile of SQLite is okay, but run a SQLite database insert will cause SQLite I/O error.
Steps to reproduce
I change memcached manifest template file to use during SQLite compile and run, the
Makefilecan be found at:https://github.com/Keepmoving-ZXY/graphene/blob/master/Examples/sqlite/Makefile themanifest.templateused during compile of SQLite:https://github.com/Keepmoving-ZXY/graphene/blob/master/Examples/sqlite/sqlite.manifest.template themanifest.templateused during run SQLite test:https://github.com/Keepmoving-ZXY/graphene/blob/master/Examples/sqlite/app.manifest.template And my folk of graphene is master branch of this repo in 2021-6-20, and the manifest.template file is change frommemcached.manifest.template, and I have not change this file fully, so memcache appears in the manifest.template for SQLite.Expected results
Expected output is:
Actual results