intel / intel/confidential-computing.sgx
AESM service using ref-LE fails.
- Dominant language
- C++
- Stars
- 1.5k
- Forks
- 565
- PR merge metrics
- No merged PRs in 30d
Description
Hello,
I started the AESM service according to [the README for ref-LE](https://github.com/intel/linux-sgx/blob/master/psw/ae/ref_le/ref_le.md), but it fails. What could be the cause of the failure?
FLC is supported and the hash value of the public key corresponding to the signature of ref-LE has already been entered in IA32_SGXPUBKEYHASH0..3 MSRs.
The SGX driver is sgx_linux_x64_driver_1.41.bin.
SGX SDK is built and installed from the latest repository according to [the README](https://github.com/intel/linux-sgx).
Machine: Dell PowerEdge R750xs
CPU: Intel(R) Xeon(R) Gold 6338 x 2
OS: Ubuntu 20.04 LTS
Karnel Version: 5.4.0-131-generic
service aesmd status command shows:
● aesmd.service - Intel(R) Architectural Enclave Service Manager
Loaded: loaded (/lib/systemd/system/aesmd.service; enabled; vendor preset: enabled)
Active: activating (auto-restart) (Result: exit-code) since Tue 2022-11-15 18:18:16 UTC; 9s ago
Process: 81324 ExecStartPre=/opt/intel/sgxpsw/aesm/linksgx.sh (code=exited, status=0/SUCCESS)
Process: 81344 ExecStartPre=/bin/mkdir -p /var/run/aesmd/ (code=exited, status=0/SUCCESS)
Process: 81345 ExecStartPre=/bin/chown -R aesmd:aesmd /var/run/aesmd/ (code=exited, status=0/SUCCESS)
Process: 81346 ExecStartPre=/bin/chmod 0755 /var/run/aesmd/ (code=exited, status=0/SUCCESS)
Process: 81347 ExecStartPre=/bin/chown -R aesmd:aesmd /var/opt/aesmd/ (code=exited, status=0/SUCCESS)
Process: 81348 ExecStartPre=/bin/chmod 0750 /var/opt/aesmd/ (code=exited, status=0/SUCCESS)
Process: 81349 ExecStart=/opt/intel/sgxpsw/aesm/aesm_service (code=exited, status=0/SUCCESS)
Main PID: 81350 (code=exited, status=1/FAILURE)
/var/opt/aesmd/data/internal_log.txt shows:
`~/linux-sgx/psw/ae/aesm_service/source/core/main.cpp|117|main|Tue Nov 15 18:12:10 2022]Fail to start service.`
Sincerely,
hatena75
Contributor guide
Assessment
This issue has not been assessed yet.