Re: [apache/incubator-teaclave] Fix rpc build error for app mode (#347)

2020-06-10 Thread Mingshen Sun
Merged #347 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/347#event-3431965537

Re: [apache/incubator-teaclave] [docs] fix some typos (#350)

2020-06-10 Thread Mingshen Sun
Merged #350 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/350#event-3432057615

[apache/incubator-teaclave] Only allow info log for release build and triage log levels (#351)

2020-06-10 Thread Mingshen Sun
## Description - Only allow info log for release build and triage log levels Note that this feature can control a compile time filter (https://docs.rs/log/0.4.8/log/#compile-time-filters). Also, for log levels, I found that most `info!` are `debug!` and some are `error!`. Please don't misuse

Re: [apache/incubator-teaclave] Only allow info log for release build and triage log levels (#351)

2020-06-10 Thread Mingshen Sun
CI passed: https://ci.mesalock-linux.org/mssun/incubator-mesatee/927/ -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/351#issuecomment-642389974

Re: [apache/incubator-teaclave] Only allow info log for release build and triage log levels (#351)

2020-06-10 Thread Mingshen Sun
Merged #351 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/351#event-3432407760

Re: [apache/incubator-teaclave] Add an example of RSA signature (#348)

2020-06-11 Thread Mingshen Sun
Merged, thanks. I made some minor changes on the name, and rebase to the latest master to fixed conflicts. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/348#issuecomment-64

Re: [apache/incubator-teaclave] Add an example of RSA signature (#348)

2020-06-11 Thread Mingshen Sun
Merged #348 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/348#event-3436308503

[apache/incubator-teaclave] [cli] Add verify subcommand to verify enclave info signatures (#354)

2020-06-12 Thread Mingshen Sun
## Description - Add a sub-command for clients to verify signatures before using the enclave info to connect the platform. You can view, comment on, or merge this pull request online at: https://github.com/apache/incubator-teaclave/pull/354 -- Commit Summary -- * [cli] Add verify subcomman

Re: [apache/incubator-teaclave] Add a simple psi (#353)

2020-06-12 Thread Mingshen Sun
Please squash all commit into one and rebase to the latest master to resolve conflicts. Thanks. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/353#issuecomment-643547668

Re: [apache/incubator-teaclave-sgx-sdk] 框架现在支持dcap吗? (#249)

2020-06-14 Thread Mingshen Sun
Yes, please refer to these reference implementation: https://github.com/apache/incubator-teaclave/tree/master/dcap For your error, you should install DCAP related libraries for linking. See [DCAP installation guide](https://download.01.org/intel-sgx/sgx-dcap/1.3.1/linux/docs/Intel_SGX_DCAP_Linu

Re: [apache/incubator-teaclave] [cli] Add verify subcommand to verify enclave info signatures (#354)

2020-06-15 Thread Mingshen Sun
Merged #354 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/354#event-3445459709

Re: [apache/incubator-teaclave] Add a simple psi (#353)

2020-06-15 Thread Mingshen Sun
Merged #353 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/353#event-3446232653

[apache/incubator-teaclave] Add development tips to use IDEs (RLS/rust-analyzer) (#355)

2020-06-15 Thread Mingshen Sun
## Description - Add development tips to use IDEs (RLS/rust-analyzer) You can view, comment on, or merge this pull request online at: https://github.com/apache/incubator-teaclave/pull/355 -- Commit Summary -- * Add development tips to use IDEs -- File Changes -- M .gitignore (1)

Re: [apache/incubator-teaclave] Add development tips to use IDEs (RLS/rust-analyzer) (#355)

2020-06-15 Thread Mingshen Sun
Merged #355 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/355#event-3446878368

Re: [apache/incubator-teaclave] Update COMMUNITY.md (#356)

2020-06-16 Thread Mingshen Sun
Merged #356 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/356#event-3447678212

Re: [apache/incubator-teaclave] Update COMMUNITY.md (#356)

2020-06-16 Thread Mingshen Sun
Thanks! -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/356#issuecomment-644595902

Re: [apache/incubator-teaclave] fix sgx sdk path. (#357)

2020-06-16 Thread Mingshen Sun
Thanks for the catch. I found that for other docker files, we are using `/opt`. Can you change to `/opt` to make all consistent? https://github.com/apache/incubator-teaclave/blob/5d1cfabedd68b3e715bdc3e9c83843902a94f1ea/docker/build.ubuntu-1804.sgx-2.9.1.Dockerfile#L47-L49 https://github.com/apa

Re: [apache/incubator-teaclave] Could teaclave be used to protect a custom algorithm? (#358)

2020-06-16 Thread Mingshen Sun
Yes, definitely. We have two typical function executors: Python script executor (language interpreter) and built-in function executor (native function). These should be discussed separately. For the Python executor, basically, a python script (which implement the proprietary algorithm) is trea

Re: Seeking speakers for 2nd SGX Community Workshop

2020-06-16 Thread Mingshen Sun
Thanks for forwarding. Yes, we can give a talk about the current status of the Teaclave project. On Tue, Jun 16, 2020 at 5:13 PM Yu Ding wrote: > > fyi > @Mingshen any interests? > > Best, > Yu > > -- Forwarded message - > From: Chow, Richard > Date: Tue, Jun 16, 2020 at 4:59 PM

[apache/incubator-teaclave] Add the make doc target to generate docs of crates in Teaclave (#359)

2020-06-16 Thread Mingshen Sun
## Description - Add the `make doc` target to generate docs of crates in Teaclave. - To support it, some dependencies are fixed in `Cargo.toml` (features and optional). - Document this in the build system doc. CI passed: https://ci.mesalock-linux.org/mssun/incubator-mesatee/946 You can view,

Re: [apache/incubator-teaclave] build error while following the document (#360)

2020-06-16 Thread Mingshen Sun
Can you give me the log with `VERBOSE=1`? Like this: ``` docker run --rm -v $(pwd):/teaclave -w /teaclave \ -it teaclave/teaclave-build-ubuntu-1804-sgx-2.9.1:latest \ bash -c ". /root/.cargo/env && \ . /opt/sgxsdk/environment && \ mkdir -p build && cd build && \ cmake -DTE

Re: [apache/incubator-teaclave] build error while following the document (#360)

2020-06-16 Thread Mingshen Sun
Yes, this is very wired. I can compile it with the exact same command in a 32G memory PC. How about directly build with the compilation command? ``` /teaclave/cmake/scripts/rustc_wrapper.sh --crate-name crc --edition=2018 /teaclave/build/cmake_tomls/sgx_trusted_lib/third_party/crates-sgx/vendor/

Re: [apache/incubator-teaclave] fix sgx sdk path. (#357)

2020-06-17 Thread Mingshen Sun
Merged #357 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/357#event-3454671866

Re: [apache/incubator-teaclave] Add the make doc target to generate docs of crates in Teaclave (#359)

2020-06-17 Thread Mingshen Sun
Merged #359 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/359#event-3454694376

Re: [apache/incubator-teaclave-sgx-sdk] [SURVEY] What companies or open source projects are using Apache Teaclave (Incubating) SGX SDK? (#239)

2020-06-17 Thread Mingshen Sun
Thank you @osuketh. Will update the project in our community page (http://teaclave.apache.org/community/). -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave-sgx-sdk/issues/239#issue

[apache/incubator-teaclave] Update projects (#361)

2020-06-17 Thread Mingshen Sun
## Description - Update the projects in our community You can view, comment on, or merge this pull request online at: https://github.com/apache/incubator-teaclave/pull/361 -- Commit Summary -- * Update projects -- File Changes -- M COMMUNITY.md (7) -- Patch Links -- https://github.c

Re: [apache/incubator-teaclave] Update projects (#361)

2020-06-17 Thread Mingshen Sun
Merged #361 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/361#event-3455385903

[apache/incubator-teaclave] Update docs organization (#362)

2020-06-17 Thread Mingshen Sun
## Description Update document organization to fit the website. You can view, comment on, or merge this pull request online at: https://github.com/apache/incubator-teaclave/pull/362 -- Commit Summary -- * Update docs organization -- File Changes -- M README.md (7) M attestation/RE

Twitter for Teaclave: @ApacheTeaclave

2020-06-17 Thread Mingshen Sun
Hi all, I created a Twitter account (@ApacheTeaclave [1]) to post development progress and community news. Best, Mingshen [1] https://twitter.com/ApacheTeaclave - To unsubscribe, e-mail: dev-unsubscr...@teaclave.apache.org For

Re: [apache/incubator-teaclave] Update docs organization (#362)

2020-06-18 Thread Mingshen Sun
Merged #362 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/362#event-3460445202

Re: [apache/incubator-teaclave] about write a new function with python (#363)

2020-06-18 Thread Mingshen Sun
Thanks, that's a good suggestion! We had a more complex example of implementing a logistic regression with Python in our previous legacy version (https://github.com/apache/incubator-teaclave/blob/legacy/examples/py_logistic_reg/payload.py). If you have interest to contribute, I can help you to m

Re: [apache/incubator-teaclave] about write a new function with python (#363)

2020-06-18 Thread Mingshen Sun
After building the platform, all compilation output will be copied to the `release/` directory. The CLI will be at `release/cli/teaclave_cli`. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubat

Re: [apache/incubator-teaclave] about write a new function with python (#363)

2020-06-18 Thread Mingshen Sun
Please install the openssl library: `sudo apt-get install libssl-dev` (for Ubuntu). -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/363#issuecomment-646417240

Re: [apache/incubator-teaclave] Small grammar and typo fixes in the documentation (#364)

2020-06-19 Thread Mingshen Sun
Thank you so much! I'm not a native speaker, maybe you can help to check other docs :) -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/364#issuecomment-646878065

Re: [apache/incubator-teaclave] Small grammar and typo fixes in the documentation (#364)

2020-06-19 Thread Mingshen Sun
Merged #364 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/364#event-3464015965

Re: [apache/incubator-teaclave] invoke builtin_private_join_and_compute.py error (in simulation mode) (#366)

2020-06-21 Thread Mingshen Sun
I saw an "ocall error" in the response. Maybe this is from the file agent. Since you are saying about using `file://` scheme, I guess this is because your registered file does not exist on the file system of the execution service. -- You are receiving this because you are subscribed to this thr

Re: [apache/incubator-teaclave] Fix the problem that leveldb parses log file abnormally (#365)

2020-06-21 Thread Mingshen Sun
I'm okay with the change. @renxingliang, maybe next time, you can explain a little bit in the PR (follow the template information). @m4sterchain, please help to confirm this PR. Thanks. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it

Re: [apache/incubator-teaclave] invoke builtin_private_join_and_compute.py error (in simulation mode) (#366)

2020-06-21 Thread Mingshen Sun
Can you run the service with `RUST_LOG=teaclave=debug` env vars and paste the log here? Thanks. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/366#issuecomment-647248719

Re: [apache/incubator-teaclave] invoke builtin_private_join_and_compute.py error (in simulation mode) (#366)

2020-06-21 Thread Mingshen Sun
If you are using docker, the file should be also in the container of the execution service. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/366#issuecomment-647254949

Re: [apache/incubator-teaclave] An example about Logistic Regression in MesaPy (#367)

2020-06-22 Thread Mingshen Sun
Merged #367 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/367#event-3470239561

Re: [apache/incubator-teaclave] function中支持对输入文件进行流式读写吗? (#368)

2020-06-22 Thread Mingshen Sun
`BufReader` 实现了 `BufRead` trait,就是所谓的 “流式操作”。 内存使用可能是其他问题造成的,比如说 samples: https://github.com/apache/incubator-teaclave/blob/0316757e2dfe748185b84d1bff5ae04701b46c8f/function/src/gbdt_train.rs#L135 或者其他问题引起的,需要详细 review/profile 代码。 -- You are receiving this because you are subscribed to this th

Re: [apache/incubator-teaclave] about write a new function with python (#363)

2020-06-22 Thread Mingshen Sun
Thanks to @GeminiCarrie, a PR (0316757e2dfe748185b84d1bff5ae04701b46c8f) of an example on using Python to implement logistic regression has been merged. Please check it out. Thanks. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on G

Re: [apache/incubator-teaclave] invoke builtin_private_join_and_compute.py error (in simulation mode) (#366)

2020-06-22 Thread Mingshen Sun
>From your previous screenshots of the log, I can see that you are using >`docker-compose` to start the services. This command will launch services in >different container with isolated file system, i.e., the execution service >does not see files in your local file system. If that's the case, pl

Re: [apache/incubator-teaclave] function中支持对输入文件进行流式读写吗? (#368)

2020-06-22 Thread Mingshen Sun
Teaclave execution service 使用的 secure file system 基于 `protected_fs`, (https://github.com/apache/incubator-teaclave/blob/master/common/protected_fs_rs/src/sgx_tprotected_fs.rs) 提供了 POSIX compatible 的 file I/O 接口。 对于加密方式,不是“逐行写入,逐行加密”,而是按照 block 进行,提供了 LRU cache。 如果想了解更多,可以参考 protected fs 的代码:ht

[apache/incubator-teaclave] Add more docs (#369)

2020-06-23 Thread Mingshen Sun
## Description - Improve documents You can view, comment on, or merge this pull request online at: https://github.com/apache/incubator-teaclave/pull/369 -- Commit Summary -- * Add more docs -- File Changes -- M CONTRIBUTORS.md (1) M README.md (4) A binder/README.md (7) A c

Re: [apache/incubator-teaclave] Add more docs (#369)

2020-06-23 Thread Mingshen Sun
Merged #369 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/369#event-3475267118

Re: [apache/incubator-teaclave] How to register local files? (#329)

2020-06-24 Thread Mingshen Sun
This is not a issue about registering local files. A lot of cases can cause "permission denied". How do you register the input file and create the task? If possible, can you provide the sources of the client side? Thanks. -- You are receiving this because you are subscribed to this thread. Re

[apache/incubator-teaclave] Add a tutorial of writing functions in Python (#370)

2020-06-24 Thread Mingshen Sun
## Description - Add a tutorial of writing functions in Python You can view, comment on, or merge this pull request online at: https://github.com/apache/incubator-teaclave/pull/370 -- Commit Summary -- * Add tutorial of writing functions in Python -- File Changes -- M README.md (1)

Re: [apache/incubator-teaclave] Add a tutorial of writing functions in Python (#370)

2020-06-24 Thread Mingshen Sun
Merged #370 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/370#event-3479924270

Re: [apache/incubator-teaclave] How to register local files? (#329)

2020-06-24 Thread Mingshen Sun
Thanks @yc-huang. I think I find the issue. When registering the function, you should also provide input information if used. Here is an example: https://github.com/apache/incubator-teaclave/blob/70f02555f58ad3f58640f75f4aadab3307230a0b/examples/python/builtin_gbdt_train.py#L36-L48 The register

Re: [apache/incubator-teaclave] about write a new function with python (#363)

2020-06-24 Thread Mingshen Sun
Closed #363. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/363#event-3480176092

Re: [apache/incubator-teaclave] about write a new function with python (#363)

2020-06-24 Thread Mingshen Sun
Tutorial on writing functions in Python is also added: https://teaclave.apache.org/docs/functions-in-python/. I think this issue can be closed. Thanks! -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apa

Re: Podling Teaclave Report Reminder - July 2020

2020-06-24 Thread Mingshen Sun
Hi all, I will work on the report tomorrow. Thanks. Best, Mingshen On Wed, Jun 24, 2020 at 8:37 PM wrote: > > Dear podling, > > This email was sent by an automated system on behalf of the Apache > Incubator PMC. It is an initial reminder to give you plenty of time to > prepare your quarterly bo

Re: [apache/incubator-teaclave] Is there any best practice to debug builtin function (#371)

2020-06-25 Thread Mingshen Sun
1. I suggest to compile (`make teaclave_unit_tests`) and run (`make run-unit-tests`) unit tests. You can see other builtin function implementations. 2. You can use `log::debug!()`. Then run services or tests with `RUST_LOG=teaclave=debug` env set. -- You are receiving this because you are subsc

Re: [apache/incubator-teaclave] Is there any best practice to debug builtin function (#371)

2020-06-25 Thread Mingshen Sun
You can find more about our build system in this doc: https://teaclave.apache.org/docs/build-system/ -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/371#issuecomment-649281

Re: [apache/incubator-teaclave] [crypto] Read/Write files as small chunks (#349)

2020-06-26 Thread Mingshen Sun
Merged #349 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/349#event-3488159564

Re: [apache/incubator-teaclave] Read/write files as small chunks (#349) (80fe5e9)

2020-06-27 Thread Mingshen Sun
You can use `while` to simplify the code. E.g., ``` while content.read() > 0 { } ``` -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/commit/80fe5e9b78f3d5a023a07f9b44cabf4bd994a919

Re: Podling Teaclave Report Reminder - July 2020

2020-06-27 Thread Mingshen Sun
#x27;s name and brand. The VP, Brand has approved the project name. (PODLINGNAMESEARCH-175) On Wed, Jun 24, 2020 at 8:39 PM Mingshen Sun wrote: > > Hi all, > > I will work on the report tomorrow. Thanks. > > Best, > Mingshen > > On Wed, Jun 24, 2020 at 8:37 PM wrote: >

Re: [apache/incubator-teaclave] How to register local files? (#329)

2020-06-28 Thread Mingshen Sun
Yes, thanks for explanation! @yc-huang -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/329#issuecomment-650946538

Re: [apache/incubator-teaclave] 怎么去证明teaclave是可行计算的环境呢? (#372)

2020-06-28 Thread Mingshen Sun
client/service 以及 service/service 之间使用 RPC 通信。RPC 是基于 attested TLS,简单来说,1) 通过 remote attestation 证明 Teaclave service 运行于可信环境,2) 通过 TLS 保证链路安全。 RPC 的文档有简单的介绍:http://teaclave.apache.org/docs/codebase/rpc/ ,但对于 attested TLS 可能需要一个专门的文档去描述,后续也会加入到文档中。 -- You are receiving this because you are subs

Re: Podling Teaclave Report Reminder - July 2020

2020-06-28 Thread Mingshen Sun
; Thanks for preparing the report! > > Kind Regards, > Furkan KAMACI > > On Sun, Jun 28, 2020 at 1:15 AM Mingshen Sun wrote: > > > Hi all, > > > > Here is the report on 2020 Q2. Feel free to comment here if I miss > > anything. Thanks. > > > >

Re: [apache/incubator-teaclave] start service error (#373)

2020-06-29 Thread Mingshen Sun
There is something wrong with your SGX environment. Please check if the SGX device (`/dev/isgx`) still exists. Also, I'll come up a fix to provide more information on the error. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHu

Re: [apache/incubator-teaclave] Access Control 服务中的python脚本参与实际环境中的权限校验吗 (#374)

2020-06-29 Thread Mingshen Sun
`acs_engine.py` 和 `model.conf` 都是静态编译进 enclave 里的。 -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/374#issuecomment-651418057

Re: [apache/incubator-teaclave] start service error (#373)

2020-06-29 Thread Mingshen Sun
Also, try to restart the AESM daemon which helps to manage architectural enclaves : `sudo systemctl restart aesmd`. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/373#issu

Re: [apache/incubator-teaclave] start service error (#373)

2020-06-29 Thread Mingshen Sun
The main reason is that the kernel may be upgraded when you reboot the system. You can setup your Linux distro to manually upgrade kernel. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-t

Re: [apache/incubator-teaclave] Access Control 服务中的python脚本参与实际环境中的权限校验吗 (#374)

2020-06-29 Thread Mingshen Sun
通过 `include_str!` (https://doc.rust-lang.org/std/macro.include_str.html)。 https://github.com/apache/incubator-teaclave/blob/80fe5e9b78f3d5a023a07f9b44cabf4bd994a919/services/access_control/enclave/src/acs.rs#L33 -- You are receiving this because you are subscribed to this thread. Reply to this e

Re: [apache/incubator-teaclave] 怎么去证明teaclave是可行计算的环境呢? (#372)

2020-06-29 Thread Mingshen Sun
我们使用了 rustls [1],是 Rust rewrite 的 TLS 库,很大程度上避免了内存安全相关的漏洞,OpenSSL 的 heartbleed 漏洞 [2] 就是由内存安全问题引起的。 - [1] https://github.com/ctz/rustls - [2] https://heartbleed.com/ -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://g

Re: [apache/incubator-teaclave] start service error (#373)

2020-06-30 Thread Mingshen Sun
I think this issue has been solved. Closed. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/373#issuecomment-651936727

Re: [apache/incubator-teaclave] start service error (#373)

2020-06-30 Thread Mingshen Sun
Closed #373. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/373#event-3498878575

[apache/incubator-teaclave] Reorganize error handling for IPC and services (#375)

2020-06-30 Thread Mingshen Sun
## Description - Re-organize the error handling logics in IPC and services. CI passed: https://ci.mesalock-linux.org/mssun/incubator-mesatee/969 You can view, comment on, or merge this pull request online at: https://github.com/apache/incubator-teaclave/pull/375 -- Commit Summary -- * Refa

Re: [apache/incubator-teaclave] Reorganize error handling for IPC and services (#375)

2020-06-30 Thread Mingshen Sun
Merged #375 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/375#event-3500081214

Re: [apache/incubator-teaclave] start service error (#373)

2020-06-30 Thread Mingshen Sun
Hi, #375 is merged. You will see more error type on SGX related errors. Thanks. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/373#issuecomment-652107771

Re: [apache/incubator-teaclave] Is there any best practice to debug builtin function (#371)

2020-06-30 Thread Mingshen Sun
Closed #371. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/371#event-3500134514

Re: [apache/incubator-teaclave] Is there any best practice to debug builtin function (#371)

2020-06-30 Thread Mingshen Sun
I'm closing this issue. Feel free to reopen or create a new one if you have further questions. Thanks. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/371#issuecomment-6521

Re: [apache/incubator-teaclave] function中支持对输入文件进行流式读写吗? (#368)

2020-06-30 Thread Mingshen Sun
Closed #368. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/368#event-3500134877

Re: [apache/incubator-teaclave] function中支持对输入文件进行流式读写吗? (#368)

2020-06-30 Thread Mingshen Sun
I'm closing this issue. Feel free to reopen or create a new one if you have further questions. Thanks. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/368#issuecomment-6521

Re: [apache/incubator-teaclave] invoke builtin_private_join_and_compute.py error (in simulation mode) (#366)

2020-06-30 Thread Mingshen Sun
Hi, any update on this issue? -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/366#issuecomment-652115453

Re: [apache/incubator-teaclave] Can I generate key for encrypting output file during computation instead of before registering output file (#328)

2020-06-30 Thread Mingshen Sun
Hi, any update on this issue? Thanks. -- You are receiving this because you commented. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/328#issuecomment-652116023

Re: [apache/incubator-teaclave] invoke builtin_private_join_and_compute.py error (in simulation mode) (#366)

2020-06-30 Thread Mingshen Sun
Closed. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/366#issuecomment-652130846

Re: [apache/incubator-teaclave] invoke builtin_private_join_and_compute.py error (in simulation mode) (#366)

2020-06-30 Thread Mingshen Sun
Closed #366. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/366#event-3500244968

Re: [apache/incubator-teaclave] error when following first function example SGX_ERROR_SERVICE_UNAVAILABLE (#377)

2020-07-01 Thread Mingshen Sun
There are something wrong when initializing the quote. https://github.com/apache/incubator-teaclave/blob/db6ddd8847216a56a3c80a4f732773727974d502/attestation/src/platform.rs#L37 What type of EPID you are using? -- You are receiving this because you are subscribed to this thread. Reply to this e

Re: [apache/incubator-teaclave] start teaclave services error 2 (#376)

2020-07-01 Thread Mingshen Sun
Can you run with debug log enabled (set the`RUST_LOG=teaclave=debug` env var)? Thanks. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/376#issuecomment-652602985

Re: [apache/incubator-teaclave] error when following first function example SGX_ERROR_SERVICE_UNAVAILABLE (#377)

2020-07-01 Thread Mingshen Sun
This is wired. Yes, `SGX_ERROR_SERVICE_UNAVAILABLE` means the AE service did not respond when initializing quote. I don't know what happened to your platform. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.c

Re: [apache/incubator-teaclave] error when following first function example SGX_ERROR_SERVICE_UNAVAILABLE (#377)

2020-07-01 Thread Mingshen Sun
The `docker-compose` file will map the domain socket file (`/var/run/aesmd/aesm.socket`) to the service containers. Did you change the `docker-compose` file? If possible, can you only run a service with debug log enabled? Like this: ``` $ cd release/services/ $ RUST_LOG=teaclave=debug ./teaclav

Re: [apache/incubator-teaclave] error when following first function example SGX_ERROR_SERVICE_UNAVAILABLE (#377)

2020-07-01 Thread Mingshen Sun
Can you help me to check if these libraries are correctly installed? Thanks. (Some dev libraries may not be used for executing the enclave, but I just included all in case). ``` # echo 'deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu bionic main' | \ tee /etc/apt/sources.

Re: [apache/incubator-teaclave] error when following first function example SGX_ERROR_SERVICE_UNAVAILABLE (#377)

2020-07-02 Thread Mingshen Sun
You are welcome. We will introduce a tool to dump information of both hardware and software to help debugging. Feel free to ask questions at anytime. Thanks. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.co

Re: [apache/incubator-teaclave] How to deploy teaclave with dcap using docker-compose? (#378)

2020-07-02 Thread Mingshen Sun
The `docker-compose-ubuntu-1804.yml` file is using the image built from `teaclave-rt.ubuntu-1804.Dockerfile`. You need to prepare a runtime image for dcap specifically and also make sure you can access attestation service inside the containers. -- You are receiving this because you are subscri

[apache/incubator-teaclave] Introducing Teaclave SGX Tool (#379)

2020-07-02 Thread Mingshen Sun
## Description Introducing Teaclave SGX Tool. This tool is to dump some SGX related information, e.g., hardware and software information, remote attestation report. This can help to diagnose some issues which may caused by the platform settings. Examples: ``` $ ./teaclave_sgx_tool status Vendor

Re: [apache/incubator-teaclave] Introducing Teaclave SGX Tool (#379)

2020-07-03 Thread Mingshen Sun
Merged #379 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/379#event-3511817650

[apache/incubator-teaclave] Fix document links (#380)

2020-07-03 Thread Mingshen Sun
## Description Fix links in the documents for website. You can view, comment on, or merge this pull request online at: https://github.com/apache/incubator-teaclave/pull/380 -- Commit Summary -- * Fix document links -- File Changes -- M common/README.md (4) M docs/README.md (1)

[apache/incubator-teaclave] Update contributors (#381)

2020-07-03 Thread Mingshen Sun
## Description - Update contributors You can view, comment on, or merge this pull request online at: https://github.com/apache/incubator-teaclave/pull/381 -- Commit Summary -- * Update contributors -- File Changes -- M CONTRIBUTORS.md (3) -- Patch Links -- https://github.com/apach

Re: [apache/incubator-teaclave] Update contributors (#381)

2020-07-03 Thread Mingshen Sun
Merged #381 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/381#event-3512009726

Re: FMSPC probing in Teaclave SGX tool

2020-07-04 Thread Mingshen Sun
Yes, I think that's a good suggestion. A lot of things we can dump (like the revocation list) to help check the status of the platform. On Sat, Jul 4, 2020 at 1:49 PM Yu Ding wrote: > > Hi guys, > > I wonder if Teaclave sgx tool is suitable for probing fmspc by collecting > and parsing its PCK ce

[apache/incubator-teaclave] Detect intel_sgx kernel module (#383)

2020-07-05 Thread Mingshen Sun
## Description Detect intel_sgx kernel module in the Teaclave SGX tool. Fixes #382 You can view, comment on, or merge this pull request online at: https://github.com/apache/incubator-teaclave/pull/383 -- Commit Summary -- * Detect intel_sgx kernel module -- File Changes -- M tool/app

Re: [apache/incubator-teaclave] Teaclave SGX Tool on DCAP driver v1.33 (#382)

2020-07-05 Thread Mingshen Sun
Closed #382 via #383. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/issues/382#event-3513781476

Re: [apache/incubator-teaclave] Detect intel_sgx kernel module (#383)

2020-07-05 Thread Mingshen Sun
Merged #383 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/383#event-3513781474

[apache/incubator-teaclave] Update contributors (#384)

2020-07-06 Thread Mingshen Sun
## Description - Add a new contributor and sort the list. You can view, comment on, or merge this pull request online at: https://github.com/apache/incubator-teaclave/pull/384 -- Commit Summary -- * Update contributors -- File Changes -- M CONTRIBUTORS.md (3) -- Patch Links -- https

[apache/incubator-teaclave] Polish the logging logic and document the usages (#385)

2020-07-06 Thread Mingshen Sun
## Description - Polish the logging logic and document the usages You can view, comment on, or merge this pull request online at: https://github.com/apache/incubator-teaclave/pull/385 -- Commit Summary -- * Polish the logging logics and document the usages -- File Changes -- M docs/de

Re: [apache/incubator-teaclave] Fix document links (#380)

2020-07-06 Thread Mingshen Sun
Merged #380 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/380#event-3517845176

Re: [apache/incubator-teaclave] Polish the logging logic and document the usages (#385)

2020-07-06 Thread Mingshen Sun
Merged #385 into master. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/apache/incubator-teaclave/pull/385#event-3517846287

<    1   2   3   4   5   6   7   8   9   10   >