Skip to content

Commit

Permalink
Update install-sgx.sh
Browse files Browse the repository at this point in the history
  • Loading branch information
@Cashmaney
Cashmaney authored Jan 3, 2024
1 parent 5d0cb11 commit eeda5de
Showing 1 changed file with 66 additions and 81 deletions.
147 changes: 66 additions & 81 deletions scripts/install-sgx.sh
View file
Original file line number Diff line number Diff line change
Expand Up @@ -6,123 +6,108 @@ INSTALL_DEPS=${1:-"true"}
INSTALL_SDK=${2:-"true"}
INSTALL_PSW=${3:-"true"}
INSTALL_DRIVER=${4:-"true"}
UBUNTUVERSION=$(lsb_release -r -s | cut -d '.' -f 1)
UBUNTUVERSION=$(grep 'VERSION_ID' /etc/os-release | cut -d '"' -f 2 | cut -d '.' -f 1)

# Check for root privileges
if [ "$(id -u)" -ne 0 ]; then
echo -e 'Script must be run as root. Use sudo, su, or add "USER root" to your Dockerfile before running this script.'
exit 1
fi

# Check if the Ubuntu version is supported
if (($UBUNTUVERSION < 16)); then
echo "Your version of Ubuntu is not supported. Must have Ubuntu 16.04 and up. Aborting installation script..."
exit 1
echo "Your version of Ubuntu is not supported. Must have Ubuntu 16.04 and up. Aborting installation script..."
exit 1
elif (($UBUNTUVERSION < 18)); then
DISTRO='xenial'
DISTRO='xenial'
elif (($UBUNTUVERSION < 20)); then
DISTRO='bionic'
OS='ubuntu18.04-server'
DISTRO='bionic'
OS='ubuntu18.04-server'
elif (($UBUNTUVERSION < 22)); then
DISTRO='focal'
OS='ubuntu20.04-server'
DISTRO='focal'
OS='ubuntu20.04-server'
else
DISTRO='jammy'
OS='ubuntu22.04-server'
DISTRO='jammy'
OS='ubuntu22.04-server'
fi

# Function to install missing packages
deps() {
echo "\n\n#######################################"
echo "##### Installing missing packages #####"
echo "#######################################\n\n"

# Install needed packages for script
sudo apt install -y make wget
apt-get update
apt-get install -y make wget
}

# Function to install the SDK
install_sdk(){
# Create a working directory to download and install the SDK inside
mkdir -p "$HOME/.sgxsdk"

# In a new sub-shell cd into our working directory so to no pollute the
# original shell's working directory
cd "$HOME/.sgxsdk"

wget -O sgx_linux_x64_sdk_2.13.100.4.bin https://download.01.org/intel-sgx/sgx-linux/2.17.1/distro/ubuntu20.04-server/sgx_linux_x64_sdk_2.17.101.1.bin
echo "\n\n############################################"
echo "##### Installing Intel SGX SDK #####"
echo "############################################\n\n"

# Make the driver and SDK installers executable
chmod +x ./sgx_linux_*.bin
mkdir -p "$HOME/.sgxsdk"
cd "$HOME/.sgxsdk"

# Install the SDK in /opt/intel/sgxsdk
(echo no; echo /opt/intel/) | ./sgx_linux_x64_sdk_2.13.100.4.bin

# Setup the environment variables for every new shell
echo "source '/opt/intel/.sgxsdk/sgxsdk/environment'" |
tee -a "$HOME/.bashrc" "$HOME/.zshrc" > /dev/null
wget -O sgx_linux_x64_sdk_2.17.101.1.bin "https://download.01.org/intel-sgx/sgx-linux/2.17.1/distro/ubuntu20.04-server/sgx_linux_x64_sdk_2.17.101.1.bin"
chmod +x ./sgx_linux_x64_sdk_*.bin
(echo no; echo /opt/intel/) | ./sgx_linux_x64_sdk_2.13.100.4.bin
echo "source '/opt/intel/sgxsdk/environment'" | tee -a "$HOME/.bashrc" "$HOME/.zshrc" > /dev/null
}

# Function to install the SGX driver
install_sgx_driver(){
echo "\n\n###############################################"
echo "##### Installing Intel SGX driver #####"
echo "###############################################\n\n"

wget -O sgx_linux_x64_driver_2.11.0_0373e2e.bin https://download.01.org/intel-sgx/sgx-linux/2.13/distro/ubuntu20.04-server/sgx_linux_x64_driver_2.11.0_0373e2e.bin

# Install the driver
sudo ./sgx_linux_x64_driver_*.bin

# Remount /dev as exec, also at system startup
sudo tee /etc/systemd/system/remount-dev-exec.service >/dev/null <<EOF
[Unit]
Description=Remount /dev as exec to allow AESM service to boot and load enclaves into SGX
[Service]
Type=oneshot
ExecStart=/bin/mount -o remount,exec /dev
RemainAfterExit=true
[Install]
WantedBy=multi-user.target
echo "\n\n###############################################"
echo "##### Installing Intel SGX driver #####"
echo "###############################################\n\n"

wget -O sgx_linux_x64_driver_2.11.0_0373e2e.bin "https://download.01.org/intel-sgx/sgx-linux/2.13/distro/ubuntu20.04-server/sgx_linux_x64_driver_2.11.0_0373e2e.bin"
chmod +x ./sgx_linux_x64_driver_*.bin
./sgx_linux_x64_driver_*.bin

# Configure the system to remount /dev as exec on boot
cat > /etc/systemd/system/remount-dev-exec.service <<EOF
[Unit]
Description=Remount /dev as exec to allow AESM service to boot and load enclaves into SGX
[Service]
Type=oneshot
ExecStart=/bin/mount -o remount,exec /dev
RemainAfterExit=true
[Install]
WantedBy=multi-user.target
EOF

sudo systemctl enable remount-dev-exec
sudo systemctl start remount-dev-exec


systemctl enable remount-dev-exec
systemctl start remount-dev-exec
}

# Function to install Platform Software (PSW)
install_psw(){
echo "\n\n##############################################"
echo "##### Installing additional dependencies #####"
echo "##### Installing Intel SGX PSW #####"
echo "##############################################\n\n"

# Install needed packages for script
sudo apt update
sudo apt install -y gdebi --no-install-recommends

# Add Intel's SGX PPA
echo "deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu $DISTRO main" |
sudo tee /etc/apt/sources.list.d/intel-sgx.list
wget -qO - https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key |
sudo apt-key add -
sudo apt update

# Install all the additional necessary dependencies (besides the driver and the SDK)
# for building a rust enclave
# wget -O /tmp/libprotobuf10_3.0.0-9_amd64.deb http://ftp.br.debian.org/debian/pool/main/p/protobuf/libprotobuf10_3.0.0-9_amd64.deb
# (sleep 3 ; echo y) | sudo gdebi /tmp/libprotobuf10_3.0.0-9_amd64.deb

sudo apt install -y libsgx-enclave-common libsgx-enclave-common-dev libsgx-urts sgx-aesm-service libsgx-uae-service libsgx-launch libsgx-aesm-launch-plugin libsgx-ae-le sgx-aesm-service libsgx-uae-service autoconf libtool
apt-get update
apt-get install -y gdebi-core --no-install-recommends
echo "deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu $DISTRO main" | tee /etc/apt/sources.list.d/intel-sgx.list
wget -qO - https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | apt-key add -
apt-get update
apt-get install -y libsgx-enclave-common libsgx-enclave-common-dev libsgx-urts sgx-aesm-service libsgx-uae-service libsgx-launch libsgx-aesm-launch-plugin libsgx-ae-le sgx-aesm-service libsgx-uae-service autoconf libtool
}

deps
# Install dependencies if requested
[ "${INSTALL_DEPS}" = "true" ] && deps

if [ "${INSTALL_SDK}" = "true" ]; then
install_sdk
fi
# Install SDK if requested
[ "${INSTALL_SDK}" = "true" ] && install_sdk

if [ "${INSTALL_PSW}" = "true" ]; then
install_psw
fi
# Install PSW if requested
[ "${INSTALL_PSW}" = "true" ] && install_psw

if [ "${INSTALL_DRIVER}" = "true" ]; then
install_sgx_driver
fi
# Install SGX driver if requested
[ "${INSTALL_DRIVER}" = "true" ] && install_sgx_driver

echo -e "\nInstallation process completed."

0 comments on commit eeda5de

Please sign in to comment.