intel / intel/confidential-computing.sgx
AESM not working on non-FLC machine
- Dominant language
- C++
- Stars
- 1.5k
- Forks
- 565
- PR merge metrics
- No merged PRs in 30d
Description
Hi, I have a non FLC machine and trying to run aesm-service.
This host was able to run SGX enclaves before. Can I get any help
I run below command to start `aesm-service`.
`sudo LD_LIBRARY_PATH=/opt/intel/sgx-aesm-service/aesm /opt/intel/sgx-aesm-service/aesm/aesm_service --no-daemon`
This version of aesm is installed from latest branch / 2.21
```
make clean; make deb_psw_pkg DEBUG=1
```
When `aesm-service` is run
```
[enclave_create_ex sgx_enclave_common.cpp:608]
secs->attibutes.flags = 24, secs->attributes.xfrm = 7
[enclave_create_ex sgx_enclave_common.cpp:760]
SGX_IOC_ENCLAVE_CREATE failed: ret = -1
[build_image /home/sgx-dev1/sgx/linux-sgx/psw/urts/loader.cpp:584] build secs failed
aesm_service: error: Fail to start service.
```
Logs from ` /var/opt/aesmd/data/internal_log.txt`
```
Fri Sep 1 19:58:29 2023]aesm service is starting
Fri Sep 1 19:58:29 2023]Failed to load LE and it's not because of LCP
Fri Sep 1 19:58:29 2023]Fail to start service.
```
cpuid
```
cpuid -1
CPU:
vendor_id = "GenuineIntel"
version information (1/eax):
processor type = primary processor (0)
family = 0x6 (6)
model = 0xe (14)
stepping id = 0xc (12)
extended family = 0x0 (0)
extended model = 0x8 (8)
(family synth) = 0x6 (6)
(model synth) = 0x8e (142)
(simple synth) = Intel (unknown type) (Whiskey Lake-U V0 / Comet Lake-U V1) [Kaby Lake] {Skylake}, 14nm
miscellaneous (1/ebx):
process local APIC physical ID = 0x2 (2)
cpu count = 0x10 (16)
CLFLUSH line size = 0x8 (8)
brand index = 0x0 (0)
```
linux
```
Linux HKLAP0449 5.15.0-82-generic #91~20.04.1-Ubuntu SMP Fri Aug 18 16:24:39 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
```
We also have the same problem running prebuilt packages on ubuntu.
Contributor guide
Assessment
This issue has not been assessed yet.