verifier.manifest.template 3.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172
  1. loader.preload = file:$(LIBCDIR)/libsysdb.so
  2. loader.exec = file:verifier
  3. loader.env.LD_LIBRARY_PATH = /lib:/lib/x86_64-linux-gnu:/usr/lib:/usr/lib/x86_64-linux-gnu:/opt/intel/sgxsdk/lib64:
  4. #/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/server
  5. #loader.env.LD_PRELOAD = /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/server/libjsig.so
  6. loader.env.PATH = /usr/bin:/bin
  7. loader.debug_type = none
  8. fs.mount.lib.type = chroot
  9. fs.mount.lib.path = /lib
  10. fs.mount.lib.uri = file:$(LIBCDIR)
  11. fs.mount.hostlib.type = chroot
  12. fs.mount.hostlib.path = /lib/x86_64-linux-gnu
  13. fs.mount.hostlib.uri = file:/lib/x86_64-linux-gnu
  14. fs.mount.bin.type = chroot
  15. fs.mount.bin.path = /bin
  16. fs.mount.bin.uri = file:/bin
  17. fs.mount.usr.type = chroot
  18. fs.mount.usr.path = /usr
  19. fs.mount.usr.uri = file:/usr
  20. #fs.mount.java.type = chroot
  21. #fs.mount.java.path = /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/
  22. #fs.mount.java.uri = file:/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/
  23. sgx.thread_num=16 #Needed for JVM, otherwise "cannot attach to any TCS message is shown"
  24. sgx.enclave_size=8G
  25. # sgx-related
  26. sgx.trusted_files.ld = file:$(LIBCDIR)/ld-linux-x86-64.so.2
  27. sgx.trusted_files.libc = file:$(LIBCDIR)/libc.so.6
  28. sgx.trusted_files.libdl = file:$(LIBCDIR)/libdl.so.2
  29. sgx.trusted_files.libpthread = file:$(LIBCDIR)/libpthread.so.0
  30. sgx.trusted_files.libselinux = file:/lib/x86_64-linux-gnu/libselinux.so.1
  31. sgx.trusted_files.libprotobuf = file:/usr/lib/x86_64-linux-gnu/libprotobuf.so.9
  32. sgx.trusted_files.liburts = file:/opt/intel/sgxsdk/lib64/libsgx_urts.so
  33. sgx.trusted_files.libuaeservice = file:/opt/intel/sgxsdk/lib64/libsgx_uae_service.so
  34. sgx.trusted_files.libstdcpp = file:/usr/lib/x86_64-linux-gnu/libstdc++.so.6
  35. sgx.trusted_files.libgcc_s = file:/lib/x86_64-linux-gnu/libgcc_s.so.1
  36. sgx.trusted_files.libz = file:/lib/x86_64-linux-gnu/libz.so.1
  37. sgx.trusted_files.libm = file:$(LIBCDIR)/libm.so.6
  38. sgx.allowed_files.sealed_msg = file:sealed_msg.txt
  39. sgx.trusted_files.libopensslcrypto = file:/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
  40. sgx.allowed_files.apache_signer_keypair = file:apache_signature_keypair.pem
  41. #For Pixy:
  42. #sgx.trusted_files.libjvm = file:/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/server/libjvm.so
  43. #sgx.trusted_files.libjsig = file:/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/server/libjsig.so
  44. #sgx.trusted_files.libverify = file:/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/libverify.so
  45. #sgx.trusted_files.libjava = file:/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/libjava.so
  46. #sgx.trusted_files.libzip = file:/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/libzip.so
  47. #sgx.trusted_files.librt = file:$(LIBCDIR)/librt.so.1
  48. #sgx.trusted_files.libnss_compat = file:/lib/x86_64-linux-gnu/libnss_compat.so.2
  49. #sgx.trusted_files.libnsl = file:/usr/lib/x86_64-linux-gnu/libnsl.so
  50. #sgx.trusted_files.libnss_nis = file:/usr/lib/x86_64-linux-gnu/libnss_nis.so
  51. #sgx.trusted_files.libnss_files = file:/usr/lib/x86_64-linux-gnu/libnss_files.so
  52. #sgx.allowed_files.jrelib = file:/usr/lib/jvm/java-8-openjdk-amd64/jre/lib
  53. ##Throws class initialization error otherwise
  54. sgx.allowed_files.jrelibext = file:/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/ext
  55. #Throws class initialization error otherwise
  56. #For Python
  57. #sgx.allow_file_creation = 1
  58. #sgx.trusted_files.libpython = file:/usr/lib/x86_64-linux-gnu/libpython2.7.so.1.0
  59. #sgx.trusted_files.libutil = file:$(LIBCDIR)/libutil.so.1
  60. #sgx.allowed_files.pyhome = file:/usr/lib/python2.7
  61. #sgx.allowed_files.pyhome2 = file:/usr/local/lib/python2.7