Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Allow to skip SGX token generation #62

Closed
wants to merge 1 commit into from
Closed

Allow to skip SGX token generation #62

wants to merge 1 commit into from

Commits on Jun 1, 2022

  1. Allow to skip SGX token generation 

    SGX Launch Token (aka EINITTOKEN) is generated right-before Gramine
launch via the `gramine-sgx-get-token` tool. For DCAP platforms, the
SGX token is unused, so there is no need to generate it. This commit
introduces a GSC switch `--skip-token-generation` for this.

This is useful for DCAP platforms (one less file in the Docker
container), and enables such scenarios as `docker run --read-only`.
Also, skipping running `gramine-sgx-get-token` paves a path to removing
Python as a run-time dependency for GSC-built Docker images.

Signed-off-by: Dmitrii Kuvaiskii <[email protected]>
    @dimakuv
    dimakuv committed Jun 1, 2022
    Configuration menu
    Copy the full SHA
    35e0650 View commit details
    Browse the repository at this point in the history