incubator-teaclave
incubator-teaclave copied to clipboard
Gramine driver proxy and its remote executor agent
Motivation & problem statement
This feature is associated with #525, it should be booted at the LibOS side before the workload get started. this feature is required to handle the lifecycle of agent, the remote streams access and remote attestation.
Proposed solution
this feature needs to have the following major functions.
- Teaclave Gramine driver proxy
- LibOS side executor agent trait
- To serialize FunctionArguments
- To serialize FunctionRuntime
- To establish a trusted channel between proxy and agent remotely with assurance
- A protocol/service to interact with remote agent
- control plane commands. e.g. attest, init, start, stop, destroy, custom cmds.
- data plane: runtime streams, argument, payload