https://github.com/privateer-project/uProbe
Application using Gramine LibOS for attestation and tracing on SGX-capable host machines. Parent enclave monitoring applications in children enclaves.
https://github.com/privateer-project/uProbe
Last synced: 5 months ago
JSON representation
Application using Gramine LibOS for attestation and tracing on SGX-capable host machines. Parent enclave monitoring applications in children enclaves.
- Host: GitHub
- URL: https://github.com/privateer-project/uProbe
- Owner: privateer-project
- License: other
- Created: 2024-09-04T12:04:15.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2024-09-16T09:03:25.000Z (about 1 year ago)
- Last Synced: 2025-05-28T06:33:53.253Z (6 months ago)
- Language: Python
- Size: 14.6 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- Awesome-SGX-Open-Source - https://github.com/privateer-project/uProbe
README
# uProbe
Application using Gramine LibOS for attestation and tracing on SGX-capable host machines.
## Development mode
```bash
docker build -t 'privateer/secprobe-dev:latest' .
docker run --security-opt seccomp=config/docker_v20.json -it privateer/secprobe-dev:latest
gramine-direct python secprobe/secprobe.py
```
## General
The flow of actions supported by this version:
## Running with grammine-sgx (In SGX-enabled host)
### Native execution in host
Run in a host with the following specs:
TBD
### Dockerized execution
#### Docker image with python entrypoint
Manifest template: python.manifest.template
#### Docker image with Bundled application
Manifest template: uProbe.manifest.template
```bash
# If more than one containers need to be generated by the same Sealign Authority, the respective key (i.e., its directory) should be passed as a volume. For instance: -v /privateer/.config/gramine:/root/.config/gramine
docker run --name security_probe --device /dev/sgx_enclave --device /dev/sgx_provision --security-opt seccomp=/home/privateer/security-probe/docker.json -it -p ''
```
```bash
# First time in the container
gramine-sgx-gen-private-key
```
```bash
# gramine-sgx
gramine-sgx uProbe
```