This crate provides the enarx-keepldr executable which loads static-pie
binaries into an Enarx Keep - that is a hardware isolated environment using
technologies such as Intel SGX or AMD SEV.
$ sudo dnf install git curl gcc pkg-config openssl-devel musl-gcc
$ sudo apt update
$ sudo apt install git curl gcc pkg-config libssl-dev musl-tools python3-minimal
$ curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
$ source $HOME/.cargo/env
$ rustup toolchain install nightly --allow-downgrade -t x86_64-unknown-linux-musl
$ git clone https://github.com/enarx/enarx-keepldr
$ cd enarx-keepldr/
$ cargo build
$ cargo test
$ cat > test.c <<EOF
#include <stdio.h>
int main() {
printf("Hello World!\n");
return 0;
}
EOF
$ musl-gcc -static -pie -fPIC -o test test.c
$ target/debug/enarx-keepldr exec ./test
Hello World!
enarx-keepldr exec will probe the machine it is running on
in an attempt to deduce an appropriate deployment backend unless
that target is already specified in an environment variable
called ENARX_BACKEND.
To see what backends are supported on your system, run:
$ target/debug/enarx-keepldr info
To manually select a backend, set the ENARX_BACKEND environment
variable:
$ ENARX_BACKEND=sgx target/debug/enarx-keepldr exec ./test
Note that some backends are conditionally compiled. They can all be compiled in like so:
$ cargo build --all-features
Or specific backends can be compiled in:
$ cargo build --features=backend-sgx,backend-kvm
License: Apache-2.0