Jia Zhang (乾越)

Use kubelet plugin to integrate shelter tool.

In order to detect the potential behavior of dlopen(), runelet can hook this function and print out the caller in debug mode.

Implement runelet-shim

2

This component decouples the relationship between PAL and the control plane of container runtime.

```C 58 static bool calc_q1q2(const uint8_t *s, const uint8_t *m, uint8_t *q1, 59 uint8_t *q2) 60 { 61 struct q1q2_ctx ctx; ... 92 BN_bn2bin(ctx.q1, q1); 93 BN_bn2bin(ctx.q2, q2); ... 100...

- Untrusted applications running in container may be unable to run in libos. - Untrusted applications don't want to implement RA by self. - init-runelet is still the No.1 process...

Full compatible with SDK.

[tools] Fix OID for RA-TLS

2

The oid parameter of mbedtls_x509write_crt_set_extension() accepts an encoded OID octet string, rather than an ASN.1 encoded OID object (type 6). Without the fix, the SGX quote extension in the dump...

Current verdictd and rats-tls projects are old.

Build failure on ubuntu

2

```shell docker run --name my_dev --workdir /root -it --rm --privileged --net host \ -v $PWD/dev:/root -v /dev/sgx_enclave:/dev/sgx/enclave \ -v /dev/sgx_provision:/dev/sgx/provision \ -v /var/run/aesmd:/var/run/aesmd ubuntu:18.04 bash apt-get update apt-get install -y...