mitigator/docker/Dockerfile

FROM graphene
ENV SGX_SDK=/opt/intel/sgxsdk/
RUN apt install -y nano gdb #tmux #TODO Move tmux to run script and nano to sgx-docker script. 
RUN mkdir source
WORKDIR source
## Setting up prereqs for decryptor - Intel SGX SSL 
# Just curling the tar.gz file and then running the build script didn't work as the extracted folder had a different name (dependent on the foldername which was compressed) --- I didnt want to make a new fork of the sgxssl script for that.
RUN git clone https://github.com/openssl/openssl.git OpenSSL_1.1.1d && \ 
	cd OpenSSL_1.1.1d && git checkout tags/OpenSSL_1_1_1d && \ 
	cd ../ && tar -cf OpenSSL_1.1.1d.tar.gz OpenSSL_1.1.1d/

#Setting up SGXSSL with the version of OpenSSL that we downloaded in the previous step.
RUN git clone https://github.com/intel/intel-sgx-ssl.git && \ 
	cd intel-sgx-ssl && git checkout tags/lin_2.5_1.1.1d && \ 
	cp ../OpenSSL_1.1.1d.tar.gz ./openssl_source/  && \ 
	cd Linux &&  make && make install

#Temp - TODO: Make the git repo public and remove these commands and retest.  
COPY gitcrysp-docker-deploy-key.id_rsa /root/.ssh/id_rsa
COPY gitcrysp-docker-deploy-key.id_rsa.pub /root/.ssh/id_rsa.pub
RUN ssh-keyscan git-crysp.uwaterloo.ca > /root/.ssh/known_hosts

#Setting up protobuf definitions for exchanging LA and post-LA messages between enclaves.
RUN git clone gogs@git-crysp.uwaterloo.ca:miti/dhmsgs_proto_defs.git && \ 
	cd dhmsgs_proto_defs/ && protoc --cpp_out=./ ./*.proto

#Setting up the decryptor enclave itself. 
RUN git clone gogs@git-crysp.uwaterloo.ca:miti/Decryptor.git && \ 
	cd Decryptor/ && make 

#Setting up common files used in the verifier, PHP extension for LA/post-LA message processing. 
RUN git clone gogs@git-crysp.uwaterloo.ca:miti/commonVerifierPHPfiles.git

#Setting up the verifier. 
RUN git clone gogs@git-crysp.uwaterloo.ca:miti/verifier.git && \ 
	cd verifier/ && make && cp verifier /root/graphene/LibOS/shim/test/native

#Verifier manifest file, makefile changes - comment out JDK/python related content
#WORKDIR /root/graphene/LibOS/shim/test/native
#RUN make SGX=1 && make SGX_RUN=1 

RUN apt install -y php7.0-dev

RUN git clone --recursive https://github.com/CopernicaMarketingSoftware/PHP-CPP.git && \
	cd PHP-CPP/ && git checkout tags/v2.1.4 &&  make all && \
	cp libphpcpp.so.* /usr/lib/ && make install 

RUN git clone gogs@git-crysp.uwaterloo.ca:miti/Apache_PHP_extension.git && \
	cd Apache_PHP_extension && \
	make