Zhang Chen
1c78c43c92
Tools/gsce: Clean up and optimize the integration of docker container and graphene-SGX
|
%!s(int64=6) %!d(string=hai) anos | |
|---|---|---|
| .. | ||
| README | %!s(int64=6) %!d(string=hai) anos | |
| gen_manifest | %!s(int64=6) %!d(string=hai) anos | |
| gsce | %!s(int64=5) %!d(string=hai) anos | |
README
Graphene-SGX Secure Container
--------------------------------
Graphene-SGX Secure Container (GSC) is a container system where the containerized application can be protected by Graphene-SGX while it is running in a container environment. The GSC system includes two parts: (1) a Docker container instance where the application is running inside Graphene-SGX and both of them are running inside the container instance; (2) a front-end named GSCE (GSC Engine) which takes a legacy Docker container image and automatically launches the contained application inside a GSC container instance.
Launching a GSC container instance includes following steps:
(1) Make sure there is a Docker container image of your application in the local or remote image repository.
(2) Download and Compile Graphene-SGX;
(2) Go to graphene/Tools
(3) Run a GSC container via the following command:
./gsce run [All the arguments used for launching a normal Docker container] [docker Image Name:Tag].
Let's take redis, a key-value, in-memory database as an example. Assume the user runs a normal redis from its docker image as follows.
docker run -i -t -p 6379:6379 redis:latest
To launch a GSC container running redis, simply change docker to "./gsce", i.e., the user runs the command as follows.
./gsce run -i -t -p 6379:6379 redis:latest
--------------------------------
Graphene-SGX Secure Container (GSC) is a container system where the containerized application can be protected by Graphene-SGX while it is running in a container environment. The GSC system includes two parts: (1) a Docker container instance where the application is running inside Graphene-SGX and both of them are running inside the container instance; (2) a front-end named GSCE (GSC Engine) which takes a legacy Docker container image and automatically launches the contained application inside a GSC container instance.
Launching a GSC container instance includes following steps:
(1) Make sure there is a Docker container image of your application in the local or remote image repository.
(2) Download and Compile Graphene-SGX;
(2) Go to graphene/Tools
(3) Run a GSC container via the following command:
./gsce run [All the arguments used for launching a normal Docker container] [docker Image Name:Tag].
Let's take redis, a key-value, in-memory database as an example. Assume the user runs a normal redis from its docker image as follows.
docker run -i -t -p 6379:6379 redis:latest
To launch a GSC container running redis, simply change docker to "./gsce", i.e., the user runs the command as follows.
./gsce run -i -t -p 6379:6379 redis:latest