mirror of
https://github.com/corda/corda.git
synced 2024-12-28 00:38:55 +00:00
aa82c55c87
* Remove linux-sgx-driver as a submodule. * Squashed 'sgx-jvm/linux-sgx-driver/' content from commit cd516380e git-subtree-dir: sgx-jvm/linux-sgx-driver git-subtree-split: cd516380e5ffa008505dc0e86ddbf45276021219
71 lines
3.5 KiB
Markdown
71 lines
3.5 KiB
Markdown
Intel(R) Software Guard Extensions for Linux\* OS
|
|
================================================
|
|
|
|
# linux-sgx-driver
|
|
|
|
Introduction
|
|
------------
|
|
Intel(R) Software Guard Extensions (Intel(R) SGX) is an Intel technology for application developers seeking to protect select code and data from disclosure or modification.
|
|
|
|
The Linux SGX software stack is comprised of the Intel(R) SGX driver, the Intel(R) SGX SDK, and the Intel(R) SGX Platform Software. The Intel(R) SGX SDK and Intel(R) SGX PSW are hosted in the [linux-sgx](https://github.com/01org/linux-sgx) project.
|
|
|
|
The [linux-sgx-driver](https://github.com/01org/linux-sgx-driver) project hosts the out-of-tree driver for the Linux Intel(R) SGX software stack, which will be used until the driver upstreaming process is complete.
|
|
|
|
License
|
|
-------
|
|
See License.txt for details.
|
|
|
|
Contributing
|
|
-------
|
|
Starting from 05/2017, we are importing the sgx driver code from the in-kernel sgx repository located at git-hub: https://github.com/jsakkine-intel/linux-sgx.git. Any contribution should be done there. Future versions of the sgx driver code will be imported later on. The motivation behind this decision is to maintain a single source code of the sgx linux driver.
|
|
An additional directory inker2ext/ has been created, it contains a script and a patch file that can be used in order to separately generate the code base of the sgx external module; it can be used in case someone wants the newest sgx driver as an external module and does not want to wait for next update.
|
|
|
|
Documentation
|
|
-------------
|
|
- [Intel(R) SGX for Linux\* OS](https://01.org/intel-softwareguard-extensions) project home page on [01.org](http://01.org)
|
|
- [Intel(R) SGX Programming Reference](https://software.intel.com/sites/default/files/managed/48/88/329298-002.pdf)
|
|
|
|
Build and Install the Intel(R) SGX Driver
|
|
-----------------------------------------
|
|
|
|
### Prerequisites
|
|
- Ensure that you have the following required operating systems:
|
|
* Ubuntu* Desktop-16.04-LTS 64bits
|
|
* Red Hat Enterprise Linux Server release 7.2 64bits
|
|
* CentOS 7.3.1611 64bits
|
|
- Ensure that you have the following required hardware:
|
|
* 6th Generation Intel(R) Core(TM) Processor (code named Skylake)
|
|
* 7th Generation Intel(R) Core(TM) Processor (code named Kaby Lake)
|
|
- Configure the system with the **SGX hardware enabled** option.
|
|
|
|
### Build the Intel(R) SGX Driver
|
|
To build Intel(R) SGX driver, change the directory to the driver path and enter the following command:
|
|
```
|
|
$ make
|
|
```
|
|
You can find the driver *isgx.ko* generated in the same directory.
|
|
|
|
### Install the Intel(R) SGX Driver
|
|
To install the Intel(R) SGX driver, enter the following command with root privilege:
|
|
```
|
|
$ sudo mkdir -p "/lib/modules/"`uname -r`"/kernel/drivers/intel/sgx"
|
|
$ sudo cp isgx.ko "/lib/modules/"`uname -r`"/kernel/drivers/intel/sgx"
|
|
$ sudo sh -c "cat /etc/modules | grep -Fxq isgx || echo isgx >> /etc/modules"
|
|
$ sudo /sbin/depmod
|
|
$ sudo /sbin/modprobe isgx
|
|
```
|
|
On Red Hat Enterprise Linux Server or CentOS, need to run below command on each reboot
|
|
```
|
|
$ sudo /sbin/modprobe isgx
|
|
```
|
|
|
|
### Uninstall the Intel(R) SGX Driver
|
|
Before uninstall the Intel(R) SGX driver, make sure the aesmd service is stopped. See the topic, Start or Stop aesmd Service, on how to stop the aesmd service.
|
|
To uninstall the Intel(R) SGX driver, enter the following commands:
|
|
```
|
|
$ sudo /sbin/modprobe -r isgx
|
|
$ sudo rm -rf "/lib/modules/"`uname -r`"/kernel/drivers/intel/sgx"
|
|
$ sudo /sbin/depmod
|
|
$ sudo /bin/sed -i '/^isgx$/d' /etc/modules
|
|
```
|