Add TDX-TEE and Bazel support for gRPC-RA-TLS (#219)

[RodgerZhu]

• Update README.md

• update arch diagram

• Update README.md

• update arch diagram

• Update README.md

fix typo

• add readthedoc

• Update index.rst

• Add Occlum backend support for gRPC-RA-TLS

• Add CMake option SGX_RA_TLS_SDK to select RA-TLS SDK

• Update gRPC-RA-TLS doc

• Fix gRPC-RA-TLS build scripts

• gprc-ra-tls: added remote attestation and verification support for grpc based on librats sdk

• Add scripts and readme for librats of grpc-ra-tls

• Fix attestation example of grpc-ra-tls

• Update index.md

• Update index.md

• Update README.md

• Add ByteDance Cloud deployment validation configuration.

• Update cloud deployment

• [Fix link] Fix link to Occulum github and small issue with wording

• Fix JNI String bug

• change Gramine path to lowercase

• Fix JNI String bug

• change Gramine path to lowercase

• Add support for hfl deployments on Azure

• Update cloudDeployment.md

• Update hfl.md

• Add files via upload

• Fix version of dependent package in tf-serving

• Add support for tf-serving deployments on Azure Start tf-serving container in the background Fix tf-serving dockerfile to specify tensorflow-model-server version compatible with Ubuntu 18.04 glibc Change tf-serving k8s deployment to only request two cpus, to specify local docker registry, to fix file paths

• Update tensorflow-serving-cluster/index.rst

• Update cloudDeployment.md

• Add setup_azure_vm.sh

• Modify secret_prov.dockerfile to include && operator between Azure DCAP Client build steps

• Modify secret_prov.dockerfile to include && operator between Azure DCAP Client build steps

• Update tensorflow-serving-cluster/index.rst

• Load secret from clf_server.conf

This secret can be used as pf key

• BigDL PPML

• Refine reference

• Add bigdl ppml readthedoc

• Refine link

• Update tensorflow-serving-cluster/index.rst

• Add Recommendation System example

• delete log files

• Add Recommendation System example

• Modify README.md

• Modify container config and README

• Modify README

• Update dockerfile

• make port and cert configurable

• fix buffer overflow

• use log_error to replace print

• Load secret from clf_server.conf

This secret can be used as pf key

• make port and cert configurable

• fix buffer overflow

• use log_error to replace print

• Update and rename install cr_lan framework .bash to auto_install_clf.bash

• Update auto_install_clf.bash

• TEE dev image: upgrade base image to ubuntu:20.04 && upgrade gramine version to v1.2

• Upgrade base image of tf-serving to ubuntu:20.04

• initial commit of phe_homo_lr

• Upgrade TF-Serving base image && Update readme

• Update phe_homo_lr.md

• upgrade gramine to v1.2 and ipcl to v1.1.3

• Update support for hfl deployments on Azure Reduce recommendation system cores per container from 12 to 9 to accommodate 48 core DCsv3 Azure VM Add VM setup script for Azure

• Add dependencies to setup_azure_vm.sh

• Update hfl.md

• Update README.md

• Update hfl.md

• Add psi with Intel SGX solution

• solve a known issue

• solve sgx lib installation issue

• Modify doc

• initial commit of phe_homo_lr

• Update phe_homo_lr.md

• upgrade gramine to v1.2 and ipcl to v1.1.3

• Fix kubernetes version to 1.23.9 in tensorflow-serving-cluster

• Update occlum and gramine dev docker files

• Update grpc-ra-tls dev docker image

• Update grpc-ra-tls readme

• Update tensorflow-serving-cluster/index.rst

• TEE dev image: upgrade base image to ubuntu:20.04 && upgrade gramine version to v1.2

• Upgrade base image of tf-serving to ubuntu:20.04

• Upgrade TF-Serving base image && Update readme

• Fix kubernetes version to 1.23.9 in tensorflow-serving-cluster

• Update occlum and gramine dev docker files

• Update grpc-ra-tls dev docker image

• Update grpc-ra-tls readme

• add the diagram to readme

• Fix some known issues

• Update PSI.md

• Update phe_homo_lr.md

• Update README.md

• Fix grpc-ra-tls merge error

• Add Ubuntu 20.04 support, upgrade gramine to v1.2 and update doc

• Update doc

• Modify the image path

• Add Ubuntu 20.04 support, upgrade gramine to v1.2 and update doc

• Update doc

• Modify the image path

• Set CLF copyright to Apache2.0

copyright set as below:

/

• Copyright (c) 2022 Intel Corporation *
• Licensed under the Apache License, Version 2.0 (the "License");
• you may not use this file except in compliance with the License.
• You may obtain a copy of the License at *
• http://www.apache.org/licenses/LICENSE-2.0
• Unless required by applicable law or agreed to in writing, software
• distributed under the License is distributed on an "AS IS" BASIS,
• WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
• See the License for the specific language governing permissions and
• limitations under the License.

• */

• modify code to fit Gramine code change

Gramine changed secret_prov file path and API, we do code change to fit that.

• Fix tensorflow-protobuf TypeError (by explicitly installing protobuf 3.19.2). Fix secret_prov.dockerfile so tzdata setup is non-interactive.

• Update index.rst

• Update index.rst Kubernetes instructions

• modify code to fit Gramine code change

Gramine changed secret_prov file path and API, we do code change to fit that.

• Update hfl.md

• enable gramine in anolisos and update docs and readme

• fixup! enable gramine in anolisos and update docs and readme

• Add support for Ubuntu 20.04 and gramine v1.2

• Update dockerfiles in common folder

• Update image

• Support docker

• Add vertical federated learning solution support for Azure deployments (#140)

Update vertical_fl submodule to the latest commit from fedlearner fix_dev_sgx branch.

Fix port numbers in test-ps-sgx.sh.

Update VFL documentation.

• add the script to support tencent ccp

• add parameters and revise Readme

• Add TF Serving integration in Anolis (#147)

• Upgrade gramine to v1.2 in tensorflow-serving-cluster

• Enable tf-serving-cluster in Anolisos (#139)

• Upgrade gramine to v1.2 in tensorflow-serving-cluster

• Enable tf-serving-cluster in Anolis OS

• Add HFL integration in Anolis docker

• Add Ubuntu 20.04 support, upgrade gramine to v1.2 and update doc

• Update doc

• Modify the image path

• enable gramine in anolisos and update docs and readme

• fixup! enable gramine in anolisos and update docs and readme

• Fix bug for anolisos in hfl

• Fix bugs in parameter parsing

• Update ehsm rats-tls sourcecode download method in the docs.

• revise dockerfile and convert_docker file

• add clf_server ccp template

• Enable TF Serving in CCP (#153)

• Ccp 3 (#137)

• Set CLF copyright to Apache2.0

copyright set as below:

/

• Copyright (c) 2022 Intel Corporation *
• Licensed under the Apache License, Version 2.0 (the "License");
• you may not use this file except in compliance with the License.
• You may obtain a copy of the License at *
• http://www.apache.org/licenses/LICENSE-2.0
• Unless required by applicable law or agreed to in writing, software
• distributed under the License is distributed on an "AS IS" BASIS,
• WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
• See the License for the specific language governing permissions and
• limitations under the License.

• */

• Add ccp support for tf serving

• Add ccp support for tf serving

• Add replace process for ssl.cfg in tf-serving

• Fix CCP script errors

• Update sgx_default_qcnl.conf

• Update CLF to main (#154)

• Support docker

• add the script to support tencent ccp

• add parameters and revise Readme

• Fix bugs in parameter parsing

• revise dockerfile and convert_docker file

• Fix bug: mrenclave checking is broken by last commit

• revise convert_docker file and add readme for ccp

• Update README_for_clf_server.md

• Update README_for_clf_client.md

• secure logistic regression inference based on HE and SGX (#151) (#159)

• inital commit

• first commit of lr_sgx_he solution

• infer client and infer server communicate via grpc

• add dockerfile and build scripts

• update dockerfile and build scripts

• Create README.md

• Update README.md

• update license wording in each file

• update the license date of gflags.cmake

• add the doc of lr_infer_he_sgx

• Add librats (#160)

• Refine rats-tls index in the doc

• cczoo: Add librats project into cczoo (#152)

• Enable psi in anolisos (#135)

• enable psi in anolisos

• fixup! enable psi in anolisos

• fixup! enable psi in anolisos

• Enable PSI with Anolis (#161)

• Add support for Ubuntu 20.04 and gramine v1.2

• Update dockerfiles in common folder

• Update image

• Enable psi in anolisos (#135)

• enable psi in anolisos

• fixup! enable psi in anolisos

• fixup! enable psi in anolisos

• Update README.md

• Update README.md

• Add script to generate certification

• add commandline option to gen_cert.sh

• Update lr_he readme and doc (#166)

• Update README.md

• Update index.md

• Update cloudDeployment.md

• Update build_python.sh

• Update build_cpp.sh

• revert to last commit - graminev1.2 (#167)

• Upgrade gramine from v1.2 to v1.3.1 (#164)

• Upgrade gramine from v1.2 to v1.3.1

• fixup! Upgrade gramine from v1.2 to v1.3.1

• Update Gramine v1.2 to v1.3.1 (#173)

• Upgrade gramine to v1.2 in tensorflow-serving-cluster

• Enable tf-serving-cluster in Anolisos (#139)

• Upgrade gramine to v1.2 in tensorflow-serving-cluster

• Enable tf-serving-cluster in Anolis OS

• Ccp 3 (#137)

• Set CLF copyright to Apache2.0

copyright set as below:

/

• Copyright (c) 2022 Intel Corporation *
• Licensed under the Apache License, Version 2.0 (the "License");
• you may not use this file except in compliance with the License.
• You may obtain a copy of the License at *
• http://www.apache.org/licenses/LICENSE-2.0
• Unless required by applicable law or agreed to in writing, software
• distributed under the License is distributed on an "AS IS" BASIS,
• WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
• See the License for the specific language governing permissions and
• limitations under the License.

• */

• modify code to fit Gramine code change

Gramine changed secret_prov file path and API, we do code change to fit that.

• modify code to fit Gramine code change

Gramine changed secret_prov file path and API, we do code change to fit that.

• Update hfl.md

• Add ccp support for tf serving

• Add ccp support for tf serving

• Add replace process for ssl.cfg in tf-serving

• fixup! update docs and readme

• Add TF Serving integration in Anolis (#147)

• Upgrade gramine to v1.2 in tensorflow-serving-cluster

• Enable tf-serving-cluster in Anolisos (#139)

• Upgrade gramine to v1.2 in tensorflow-serving-cluster

• Enable tf-serving-cluster in Anolis OS

• Add HFL integration in Anolis docker

• Add Ubuntu 20.04 support, upgrade gramine to v1.2 and update doc

• Update doc

• Modify the image path

• enable gramine in anolisos and update docs and readme

• fixup! enable gramine in anolisos and update docs and readme

• Fix bug for anolisos in hfl

• Update ehsm rats-tls sourcecode download method in the docs.

• Fix CCP script errors

• Update sgx_default_qcnl.conf

• Upgrade gramine from v1.2 to v1.3.1 in tf-serving-cluster (#171)

• revert to last commit - graminev1.2 (#167)

• Support lr he grpc under Azure (#174)

• secure logistic regression inference based on HE and SGX (#151)

• inital commit

• first commit of lr_sgx_he solution

• infer client and infer server communicate via grpc

• add dockerfile and build scripts

• update dockerfile and build scripts

• Create README.md

• Update README.md

• update license wording in each file

• update the license date of gflags.cmake

• add the doc of lr_infer_he_sgx

• update readme and document (#165)

• Update README.md

• Update index.md

• Add Secure Logistic Regression Inference with HE and Intel SGX solution support for Azure deployments (#170)

• Support for Gramine v1.2 and update docs (#172)

• Support for gramine v1.2 and update docs

• update docs

• remove cryptography from dockerfile

remove cryptography to pass OSPDT

• remove cryptography from dockerfile (#178)

remove cryptography

• Modify HFL to start containers in detached mode for automation purposes (#177)

• Sync PSI branch to main (#182)

• Add support for Ubuntu 20.04 and gramine v1.2

• Update dockerfiles in common folder

• enable psi in anolisos

• fixup! enable psi in anolisos

• Support for Gramine v1.2 and update docs (#172)

• update docs

• Modify documentation to move solution ingredients from the prerequisite section into their own list (a clarification based on user feedback) (#183)

• Add penetration testing

• Update README.md

• Sync dev/pentests to main (#187)

• Add two-stage demos for Pentests (#186)

• Add two-stage key_generator demo for Pentests

• Fix memory_attack doc path

• Fix hyperlinks for Pentests doc

• Update README.md

• Update Overview.md

• Added some miss components (#188)

• Fix app version (#191)

• Revert "Fix app version (#191)" (#192)

This reverts commit 9889b347ffe516a0a04e0974e81a40d1774a9ba9.

• Work around python extract tarfile error in encrypted file system (#195)

• Change gramine build type to release to workaround python extract tarfile error in encrypted file system

• Fix anolisos image build error && Add usage help for gramine-sgx-dev

• Submit HTTPA solution (#198)

• First commit for httpa

• update index.rst for httpa

• Update for adding PoC texts

• add tootip for clf_server and clf_client (#158)

• Sync branch-dev/cross_lang_framework to main

• Update README.md

• fix typo in readme

• fix typo

• move ca_cert from trust file to allowed file, so that ca_cert can be mapped in in container environment.

• Update VFL and tf-serving documentation (#200)

• Fixed app version (#194)

• Add Private Set Intersection support for Azure deployments (#185)

• Add Private Set Intersection support for Azure deployments

• Revert PSI changes to start_container.sh that started containers detached

• Sync branch0.1/tf serving cluster to main (#202)

• Upgrade gramine to v1.2 in tensorflow-serving-cluster

• Enable tf-serving-cluster in Anolisos (#139)

• Upgrade gramine to v1.2 in tensorflow-serving-cluster

• Enable tf-serving-cluster in Anolis OS

• Ccp 3 (#137)

• Set CLF copyright to Apache2.0

copyright set as below:

/

• Copyright (c) 2022 Intel Corporation *
• Licensed under the Apache License, Version 2.0 (the "License");
• you may not use this file except in compliance with the License.
• You may obtain a copy of the License at *
• http://www.apache.org/licenses/LICENSE-2.0
• Unless required by applicable law or agreed to in writing, software
• distributed under the License is distributed on an "AS IS" BASIS,
• WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
• See the License for the specific language governing permissions and
• limitations under the License.

• */

• modify code to fit Gramine code change

Gramine changed secret_prov file path and API, we do code change to fit that.

• modify code to fit Gramine code change

Gramine changed secret_prov file path and API, we do code change to fit that.

• Update hfl.md

• Add ccp support for tf serving

• Add ccp support for tf serving

• Add replace process for ssl.cfg in tf-serving

• fixup! update docs and readme

• Add TF Serving integration in Anolis (#147)

• Upgrade gramine to v1.2 in tensorflow-serving-cluster

• Enable tf-serving-cluster in Anolisos (#139)

• Upgrade gramine to v1.2 in tensorflow-serving-cluster

• Enable tf-serving-cluster in Anolis OS

• Add HFL integration in Anolis docker

• Add Ubuntu 20.04 support, upgrade gramine to v1.2 and update doc

• Update doc

• Modify the image path

• enable gramine in anolisos and update docs and readme

• fixup! enable gramine in anolisos and update docs and readme

• Fix bug for anolisos in hfl

• Update ehsm rats-tls sourcecode download method in the docs.

• Fix CCP script errors

• Update sgx_default_qcnl.conf

• Upgrade gramine from v1.2 to v1.3.1 in tf-serving-cluster (#171)

• Modify tensorflow_model_server install method (#176)

---

• Update ccp-tf-serving documentation (#201)

• update document

• Update README.md

• Update README.md

• Update README.md

• Update README.md

---

• Sync branch dev/machine binding root key backup to main (#206)

• add backup schema of machine binding Rootkey

• rename folder name to machine_binding_key_backup

• revise README to correct solution name

---

• Update encryption tool & key

• Update tensorflow_model_server.toml

• Update cert

• Update tf_serving.dockerfile

• Update tf_serving.dockerfile

• Add files via upload

• Update tensorflow_model_server.toml

• Update tf_serving.dockerfile

Remove libsecret_prov_attest.so since it will be found in system path.

• Update tensorflow_model_server.toml

• Update README.md

• Update cloudDeployment.md

• Archiving Notice

• Update README.md

• Add solution tdx-encrypted-vfs and tdx-tf-serving-ppml (#210)

• Add solution tdx-encrypted-vfs

• Add solution tdx-tf-serving-ppml

• Add tdx-hfl solution (#209) (#211)

• Add tdx-hfl solution

• update copyright

• Update tdx-hfl.md

• Update README.md

• Update requirements.txt

• Upgrade tensorflow version (#214)

• Bump tensorflow (#213)

Bumps tensorflow from 2.6.2 to 2.11.1.

• Release notes
• Changelog
• Commits

---

updated-dependencies:

• dependency-name: tensorflow dependency-type: direct:production ...

• Update requirements.txt

• Update requirements.txt

• Update requirements.txt

• Bump pillow from 9.2.0 to 9.3.0 in /documents/readthedoc (#215)

Bumps pillow from 9.2.0 to 9.3.0.

• Release notes
• Changelog
• Commits

---

updated-dependencies:

• dependency-name: pillow dependency-type: direct:production ...

• Fix horizontal_fl/start_container.sh script (#212)

• Add TF Serving Cluster PPML support for Azure AKS and MAA (#217)

• Add TF Serving Cluster PPML support for Azure AKS and MAA

• Modify secret provider to check mr_enclave/mr_signer measurements of tf_serving service

• Add miscellaneous enhancements

• Encrypt ssl.cfg, the private TLS key used by tf-serving container

• Update documentation

• Add convenience scripts

• Change tf-serving imagePullPolicy to Always

• Update index.rst

• Update index.rst

• Update dependencies in requirements.txt

• Update manifest.template for anolisos

---

• Add TDX Linux Stack

• Update index.rst

• Add TDX dev docker image

• Add TDX-TEE and Bazel support for grpc-ratls

• Update gRPC-RATLS README

---

Description of the PR

How to test this PR?

[RodgerZhu]

close