search

intel / sgx-ra-sample

Other
178 stars 65 forks source link

Document more of the required installation? #41

Open tygert opened 4 years ago

tygert commented 4 years ago

Did you want to specify in the documentation which packages from the SGX PSW need to be installed? For instance, the installation instructions for the SGX PSW never mention installing libsgx-uae-service even though this sgx-ra-sample requires that package. To run sgx-ra-sample on Ubuntu 18.04, for example, requires "sudo apt-get install libsgx-uae-service" whereas the installation instructions for the SGX PSW mention only "sudo apt-get install libsgx-launch libsgx-urts", "sudo apt-get install libsgx-epid libsgx-urts", and "sudo apt-get install libsgx-quote-ex libsgx-urts".

mechalas commented 4 years ago

Really what we need to do is strip out those components that are no longer needed (specifically, the components for platform services on Linux).

jmechalas commented 4 years ago

After reviewing the 2.9 SDK it appears the packaging that's been added there is to support automated deployment. There's not really any change for the RA sample, as we can't eliminate the dependency on the UAE service library (at least, not for EPID based attestation, which is all the sample supports for the moment).

As part of the next release, though, I'll add some additional language to the README that indicates you need everything if you choose to go the Debian package/RPM route for the PSW vs. building the command-line installer (which also installs everything).

jmechalas commented 4 years ago

I am still poking at this, trying to work out what makes sense for me to do.

To answer your specific question, you need the whole PSW package no matter what you are are doing. Though an individual application may not need a particular library, other enclaves and applications might. There's no optional piece of the PSW.