intel / intel/confidential-computing.sgx
Questions about AESM mapping in docker container
- Dominant language
- C++
- Stars
- 1.5k
- Forks
- 565
- PR merge metrics
- No merged PRs in 30d
Description
Hello, when I run SGX in docker, the error message `aesm_service[14]: Fail to start service.` will appear. After that, I used the method of `docker run -v /run/aesmd/aesm.socket:/run/aesmd/aesm.socket` to map the aesm of my own host to the docker container, and the program could run correctly.
My question is, if I want to send my docker image to a host that doesn't have SGX PSW installed, is there any way that he doesn't need to map aesm to docker, and enables him to use the image normally?
Contributor guide
Research direction
Start by reviewing the Docker invocation and the `/run/aesmd/aesm.socket` mapping described in the issue, along with the host's SGX PSW and AESM requirements. Determine whether an SGX image can run on a host without SGX PSW or AESM, and document the supported deployment constraints.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker
- Domain
- devops, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100