README 1.3 KB

123456789101112131415161718192021222324
  1. Graphene-SGX Secure Container
  2. --------------------------------
  3. Graphene-SGX Secure Container (GSC) is a container system where the containerized application can be protected by Graphene-SGX while it is running in a container environment. The GSC system includes two parts: (1) a Docker container instance where the application is running inside Graphene-SGX and both of them are running inside the container instance; (2) a front-end named GSCE (GSC Engine) which takes a legacy Docker container image and automatically launches the contained application inside a GSC container instance.
  4. Launching a GSC container instance includes following steps:
  5. (1) Make sure there is a Docker container image of your application in the local or remote image repository.
  6. (2) Download and Compile Graphene-SGX;
  7. (2) Go to graphene/Tools
  8. (3) Run a GSC container via the following command:
  9. ./gsce run [All the arguments used for launching a normal Docker container] [docker Image Name:Tag].
  10. Let's take redis, a key-value, in-memory database as an example. Assume the user runs a normal redis from its docker image as follows.
  11. docker run -i -t -p 6379:6379 redis:latest
  12. To launch a GSC container running redis, simply change docker to "./gsce", i.e., the user runs the command as follows.
  13. ./gsce run -i -t -p 6379:6379 redis:latest