Dmitrii Kuvaiskii
Dmitrii Kuvaiskii
No answer for several months, I'm closing this issue.
There is official Gramine RA-TLS integration with Intel Trust Authority (aka ITA, previously known as Project Amber): https://github.com/gramineproject/contrib/tree/master/Integrations/intel/ra_tls_ita Closing this PR as not required anymore.
Jenkins, test this please
@haitaohuang The EDMM patch would require Gramine changes: Gramine's untrusted PAL must call `madvise(..., MADV_WILLNEED)` on the mapped ranges. There could be different places where we could put such a...
In recent tests, this optimization was shown to be not effective enough (we implemented other EDMM optimizations which yield higher benefits). Reassigned the priority to P3 (very low).
As @kailun-qin explained, Gramine currently doesn't emulate file timestamps. So all timestamps returned are simply `0`. The reason for this is (missing) security -- there is no way Gramine can...
> I think gramine can record the creation time in `manifest.sgx` and verify it during startup. Hm, I don't understand this point. I guess you're talking only about `sgx.trusted_files`? Even...
@jcsora Would it be possible for you to give us some more details and context for your use case? What times do you expect to see for these files? Do...
I can confirm that there's a spurious `\` symbol when executing with `gramine-sgx`. Below is my reproducer: - Preparation: ```bash gramine/CI-Examples/bash$ ls -lah -rwxrwxr-x ... test_eval gramine/CI-Examples/bash$ cat test_eval #!/usr/bin/env...
Looking a bit more into this, simplified the bash script and found the culprit: ```bash gramine/CI-Examples/bash$ cat test_eval #!/usr/bin/env bash save () { for i do printf %s\\n "$i" |...