sgx

Documentation

Overview

Package sgx implements the runtime provisioner for runtimes in Intel SGX enclaves.

Index

• func New(cfg Config) (host.Provisioner, error)
• type Config
• type RuntimeExtra

Functions

func New

func New(cfg Config) (host.Provisioner, error)

New creates a new Intel SGX runtime provisioner.

Types

type Config

type Config struct {
	// LoaderPath is the path to the runtime loader binary.
	LoaderPath string

	// IAS is the Intel Attestation Service endpoint.
	IAS ias.Endpoint

	// RuntimeAttestInterval is the interval for periodic runtime re-attestation. If not specified
	// a default will be used.
	RuntimeAttestInterval time.Duration

	// SandboxBinaryPath is the path to the sandbox support binary.
	SandboxBinaryPath string

	// InsecureNoSandbox disables the sandbox and runs the loader directly.
	InsecureNoSandbox bool
}

Config contains SGX-specific provisioner configuration options.

type RuntimeExtra

type RuntimeExtra struct {
	// SignaturePath is the path to the runtime (enclave) SIGSTRUCT.
	SignaturePath string

	// UnsafeDebugGenerateSigstruct allows the generation of a dummy SIGSTRUCT
	// if an actual signature is unavailable.
	UnsafeDebugGenerateSigstruct bool
}

RuntimeExtra is the extra configuration for SGX runtimes.