Dockerization of SGX container built using Intel SDK

Instructions:

• Create a new image with this one as a base, or mount your source code as a volume at /usr/src/app
• The driver must be loaded in the host, but aesmd and jhid must be stopped

Current supported versions

• sgx_1.9
• sgx_2.0
• sgx_2.1
• sgx_2.1.1
• sgx_2.1.2
• sgx_2.2
• sgx_2.3
• sgx_2.3.1
• sgx_2.4
• sgx_2.5

Example Dockerfile

Example using SampleEnclave shipped with the official SDK

Dockerfile

FROM sebvaucher/sgx-base:sgx_2.5

COPY . ./
RUN make SGX_DEBUG=0 SGX_PRERELEASE=1 SGX_MODE=HW

CMD ["./app"]

Building image

$ docker build -t sampleenclave .

Running in container

If your system uses the MEI kernel module (/dev/mei0 is available), you should run the application using the following command:

$ docker run --device /dev/isgx --device /dev/mei0 sampleenclave

If your system uses the DAL kernel module (/dev/dal0 is available), you should run the application using the following command:

$ docker run --device /dev/isgx --device /dev/dal0 sampleenclave