Dmitrii Kuvaiskii

@woju Could you update the TODO list? What's left to be done? Or maybe this issue can be closed now?

I'll just copy-paste my comment from https://github.com/gramineproject/gramine/pull/244 because I think it's important to discuss this. The context is that the current Gramine package doesn't come with DCAP attestation enabled (only...

> ELF parsing/loading Isn't this done already? @pwmarcz @mkow . > Support for upstreamed SGX driver for Linux This is done I think. See https://github.com/oscarlab/graphene/pull/2084 (for Graphene proper) and https://github.com/oscarlab/graphene/pull/2165...

@mkow Do we still want to keep this meta-issue open? There is one item left ("Documenting possible misuses of Graphene and its limitations"), and we don't have immediate plans to...

@ScottLiao920 Could you try the latest Gramine (you can just git-clone and build, as you did previously)? We just released v1.2, so I wonder if this problem got fixed by...

+1 to Michal's remark about the rewrite of the FS subsystem before implementing `flock()`. Btw, isn't `flock()` (lock the file) is kinda useless in Graphene-SGX? We don't trust the host...

At the LibOS level, there is no "protected fs" (it is implemented purely at the Linux-SGX PAL layer). For tmpfs sure. We need tmpfs first though :)

Looking at this from August 2022, some things are irrelevant/were done already: > I think this is blocked on filesystem rewrite (the current filesystem code is really terrible :) )....

+1 to @boryspoplawski, we should implement `flock()` properly.

@lead4good We'll discuss whether we have the manpower to work on `flock()`. We just finished v1.3, so maybe we can include it in v1.4... No promises though.