mirror of
https://github.com/corda/corda.git
synced 2024-12-27 08:22:35 +00:00
4dbd404f64
* Remove non-deterministic classes from Avian (wip). * Complete integration between Avian and our local OpenJDK fork. * Revert accidental Avian modification. * Implements a "blacklist filter" for Avian's system classloader. * Remove .DSA, .RSA, .SF and .MF files when creating a fat jar. * Revert more accidental Avian changes. * Fix breakage with dependencies, and retain Kryo instance. * Apply blacklisting per thread rather than globally. * Blacklist java.lang.ClassLoader and all java.lang.Thread* classes. * Add comment explaining class blacklisting. * Fix Avian when building without OpenJDK. * Configure ProGuard to keep more classes for deserialisation. * Retain explicit return type for secure random function. * Add sources of random numbers to the class blacklist. * Blacklist the threading classes more precisely. * Make SystemClassLoader.isForbidden() static. * Prevent ProGuard from removing SerializedLambda.readResolve(). * Remove Avian tests involving direct buffers.
60 lines
2.7 KiB
Makefile
60 lines
2.7 KiB
Makefile
MAKEFILE_DIR:=$(shell dirname $(realpath $(lastword $(MAKEFILE_LIST))))
|
|
ROOT=$(MAKEFILE_DIR)/dependencies/root
|
|
SHELL=/bin/bash
|
|
# JAVA_HOME=$(ROOT)/usr/lib/jvm/java-8-openjdk-amd64
|
|
# JAVA_HOME=$(ROOT)/usr/lib/jvm/java-openjdk
|
|
|
|
JDK_IMAGE=$(MAKEFILE_DIR)/jdk8u/build/linux-x86_64-normal-server-release/images/j2re-image
|
|
|
|
.PHONY: all
|
|
all: jvm-enclave/standalone/build/standalone_sgx_verify linux-sgx-driver/isgx.ko
|
|
|
|
# The final binary
|
|
jvm-enclave/standalone/build/standalone_sgx_verify: avian linux-sgx/build/linux/aesm_service
|
|
JAVA_HOME=$(JAVA_HOME) JDK_IMAGE=$(JDK_IMAGE) $(MAKE) -C jvm-enclave
|
|
|
|
# Avian with SGX support
|
|
AVIAN_EXTRA_CFLAGS="-I$(ROOT)/usr/include -I$(ROOT)/usr/include/x86_64-linux-gnu"
|
|
AVIAN_EXTRA_LDFLAGS="-L$(ROOT)/usr/lib -L$(ROOT)/usr/lib/x86_64-linux-gnu -ldl -lpthread -lz"
|
|
.PHONY: avian
|
|
avian: | $(JDK_IMAGE)
|
|
PATH=$(ROOT)/usr/bin:$(PATH) $(MAKE) -C avian build-lflags=$(AVIAN_EXTRA_LDFLAGS) extra-lflags=$(AVIAN_EXTRA_LDFLAGS) extra-build-cflags+=$(AVIAN_EXTRA_CFLAGS) extra-cflags+=$(AVIAN_EXTRA_CFLAGS) mode=debug openjdk=$(JAVA_HOME) openjdk-src=$(MAKEFILE_DIR)/jdk8u/jdk/src openjdk-image=$(JDK_IMAGE) system=sgx
|
|
|
|
# The SGX SDK
|
|
LINUX_SGX_SOURCES=$(shell find linux-sgx \( -name '*.c' -o -name '*.cpp' -o -name '*.h' -o -name '*.edl' \) ! \( -name '*_u.?' -o -name '*_t.?' -o -name '*.pb.h' -o -path 'linux-sgx/sdk/cpprt/linux/libunwind/*' -o -path 'linux-sgx/external/rdrand/src/config.h' \)) # Poor man's up-to-date check (they don't have one in the SDK??)
|
|
linux-sgx/build/linux/aesm_service: $(LINUX_SGX_SOURCES) linux-sgx/external/ippcp_internal/inc
|
|
LD_LIBRARY_PATH=$(ROOT)/usr/lib/x86_64-linux-gnu:$(ROOT)/lib/x86_64-linux-gnu LIBRARY_PATH=$(ROOT)/usr/lib/x86_64-linux-gnu PATH=$(ROOT)/usr/bin:$(PATH) ACLOCAL_PATH=$(ROOT)/usr/share/aclocal $(MAKE) -C linux-sgx EXTRA_CXXFLAGS+="-isystem $(ROOT)/usr/include -isystem $(ROOT)/usr/include/x86_64-linux-gnu -L$(ROOT)/usr/lib/x86_64-linux-gnu" DEBUG=1
|
|
|
|
jdk8u:
|
|
git clone -b deterministic-jvm8 --single-branch https://github.com/corda/openjdk $@
|
|
|
|
$(JDK_IMAGE): jdk8u
|
|
cd jdk8u && \
|
|
ALSA_NOT_NEEDED=yes CUPS_NOT_NEEDED=yes FREETYPE_NOT_NEEDED=yes \
|
|
PULSE_NOT_NEEDED=yes X11_NOT_NEEDED=yes $(SHELL) ./configure && \
|
|
$(MAKE) JOBS=2 images docs
|
|
|
|
linux-sgx/external/ippcp_internal/inc:
|
|
cd linux-sgx && $(SHELL) ./download_prebuilt.sh
|
|
|
|
linux-sgx-driver/isgx.ko:
|
|
$(MAKE) -C linux-sgx-driver
|
|
|
|
build:
|
|
mkdir -p $@
|
|
|
|
.PHONY: clean
|
|
clean:
|
|
$(MAKE) -C jvm-enclave clean
|
|
$(MAKE) -C linux-sgx clean
|
|
$(MAKE) -C linux-sgx-driver clean
|
|
[ ! -d jdk8u ] || $(MAKE) -C jdk8u clean
|
|
../gradlew -p .. verify-enclave:clean
|
|
$(MAKE) -C avian clean
|
|
|
|
.PHONY: distclean
|
|
distclean: clean
|
|
$(RM) -r jdk8u
|
|
$(RM) -r linux-sgx/external/{ippcp_internal,libirc,libm}
|
|
|