🚨 This project is an unsupported experiment.

Docker-in-docker SGX-LKL sample of a Node hello world app. 🧙‍📦⚡

I needed a sample to determine how Node apps might run inside SGX-LKL (in an enclave). I also wanted to try out developing the release entirely inside a docker container. This requires docker-in-docker, to generate the SGX-LKL image that will run on the enclave.

Note: This is currently configured to run using simulated mode (not against real enclave hardware). To modify it, specify --build-arg MAKE_TARGET="" during docker build.

To run the sample on your own, just grab and run the runtime docker container from this repo's packages:

# Gets the container from github
# Runs it in privileged mode
# Forwards the docker daemon control socket

docker run -it --rm --privileged -v //var/run/docker.sock:/var/run/docker.sock bengreenier/sgx-lkl-turtles:latest-sim

You should see:

Creating ./app.img from Dockerfile ./src/Dockerfile...
Building Docker image...
Creating and exporting Docker container...
Creating disk image file...
Succesfully created ./app.img.
Cleaning up temporary files...
[    SGX-LKL   ] No tap device specified, networking will not be available.
[    SGX-LKL   ] Kernel command line: ""
[    SGX-LKL   ] Adding entropy to entropy pool.
[    SGX-LKL   ] wg0 has public key KNAL8UQFWViNDi1WtGNx4wqsH9BCQ9Xwv8UX7+Itw3Y=
[    SGX-LKL   ] Set working directory /
[    SGX-LKL   ] Calling application main
Hello world. I'm inside an enclave!
    SGX-LKL   ] Set working directory /

Note that we've limited the v8 max-old-space-size to 512MB and adjusted the SGXLKL_HEAP to 640MB. This limits the possibilities of this sample app, but helps keep the runtime quite small.

This is super easy, and depends only on Docker.

# This will take a while (~25m)
docker build -t sgx-lkl-turtles:dev .

You can modify the image during the build phase to target physical hardware, or simulated hardware (the default).

For example:

docker build --build-arg MAKE_TARGET="" -t sgx-lkl-turtles:dev .

That's it! 🎉

• This wouldn't be possible without the awesome SGX-LKL Project.
• Icons made by Pixel perfect from www.flaticon.com.