intel / intel/confidential-computing.sgx

Questions about AESM mapping in docker container

Open
#792 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
C++
Stars
1.5k
Forks
565
PR merge metrics
No merged PRs in 30d

Description

Hello, when I run SGX in docker, the error message `aesm_service[14]: Fail to start service.` will appear. After that, I used the method of `docker run -v /run/aesmd/aesm.socket:/run/aesmd/aesm.socket` to map the aesm of my own host to the docker container, and the program could run correctly.
My question is, if I want to send my docker image to a host that doesn't have SGX PSW installed, is there any way that he doesn't need to map aesm to docker, and enables him to use the image normally?

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the Docker invocation and the `/run/aesmd/aesm.socket` mapping described in the issue, along with the host's SGX PSW and AESM requirements. Determine whether an SGX image can run on a host without SGX PSW or AESM, and document the supported deployment constraints.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker
Domain
devops, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.