|
|
@@ -1 +1,51 @@
|
|
|
FROM graphene
|
|
|
+ENV SGX_SDK=/opt/intel/sgxsdk/
|
|
|
+RUN apt install -y nano gdb #tmux #TODO Move tmux to run script and nano to sgx-docker script.
|
|
|
+RUN mkdir source
|
|
|
+WORKDIR source
|
|
|
+## Setting up prereqs for decryptor - Intel SGX SSL
|
|
|
+# Just curling the tar.gz file and then running the build script didn't work as the extracted folder had a different name (dependent on the foldername which was compressed) --- I didnt want to make a new fork of the sgxssl script for that.
|
|
|
+RUN git clone https://github.com/openssl/openssl.git OpenSSL_1.1.1d && \
|
|
|
+ cd OpenSSL_1.1.1d && git checkout tags/OpenSSL_1_1_1d && \
|
|
|
+ cd ../ && tar -cf OpenSSL_1.1.1d.tar.gz OpenSSL_1.1.1d/
|
|
|
+
|
|
|
+#Setting up SGXSSL with the version of OpenSSL that we downloaded in the previous step.
|
|
|
+RUN git clone https://github.com/intel/intel-sgx-ssl.git && \
|
|
|
+ cd intel-sgx-ssl && git checkout tags/lin_2.5_1.1.1d && \
|
|
|
+ cp ../OpenSSL_1.1.1d.tar.gz ./openssl_source/ && \
|
|
|
+ cd Linux && make && make install
|
|
|
+
|
|
|
+#Temp - TODO: Make the git repo public and remove these commands and retest.
|
|
|
+COPY gitcrysp-docker-deploy-key.id_rsa /root/.ssh/id_rsa
|
|
|
+COPY gitcrysp-docker-deploy-key.id_rsa.pub /root/.ssh/id_rsa.pub
|
|
|
+RUN ssh-keyscan git-crysp.uwaterloo.ca > /root/.ssh/known_hosts
|
|
|
+
|
|
|
+#Setting up protobuf definitions for exchanging LA and post-LA messages between enclaves.
|
|
|
+RUN git clone gogs@git-crysp.uwaterloo.ca:miti/dhmsgs_proto_defs.git && \
|
|
|
+ cd dhmsgs_proto_defs/ && protoc --cpp_out=./ ./*.proto
|
|
|
+
|
|
|
+#Setting up the decryptor enclave itself.
|
|
|
+RUN git clone gogs@git-crysp.uwaterloo.ca:miti/Decryptor.git && \
|
|
|
+ cd Decryptor/ && make
|
|
|
+
|
|
|
+#Setting up common files used in the verifier, PHP extension for LA/post-LA message processing.
|
|
|
+RUN git clone gogs@git-crysp.uwaterloo.ca:miti/commonVerifierPHPfiles.git
|
|
|
+
|
|
|
+#Setting up the verifier.
|
|
|
+RUN git clone gogs@git-crysp.uwaterloo.ca:miti/verifier.git && \
|
|
|
+ cd verifier/ && make && cp verifier /root/graphene/LibOS/shim/test/native
|
|
|
+
|
|
|
+#Verifier manifest file, makefile changes - comment out JDK/python related content
|
|
|
+#WORKDIR /root/graphene/LibOS/shim/test/native
|
|
|
+#RUN make SGX=1 && make SGX_RUN=1
|
|
|
+
|
|
|
+RUN apt install -y php7.0-dev
|
|
|
+
|
|
|
+RUN git clone --recursive https://github.com/CopernicaMarketingSoftware/PHP-CPP.git && \
|
|
|
+ cd PHP-CPP/ && git checkout tags/v2.1.4 && make all && \
|
|
|
+ cp libphpcpp.so.* /usr/lib/ && make install
|
|
|
+
|
|
|
+RUN git clone gogs@git-crysp.uwaterloo.ca:miti/Apache_PHP_extension.git && \
|
|
|
+ cd Apache_PHP_extension && \
|
|
|
+ make
|
|
|
+
|
