Commit Graph

2 Commits

Author SHA1 Message Date
Mikko Ylinen
d65cb902e6 sgx: move to RFC v4x device API
The SGX device nodes have changed from /dev/sgx/[enclave|provision]
to /dev/sgx_[enclave|provision] in v4x RFC patches according to the
LKML feedback.

This changes moves to use the new device nodes. Backwards compatibility
is provided by adding /dev/sgx directory mount to containers. This
assumes the cluster admin has installed the udev rules provided in the
README to make the old device nodes as symlinks to the new device nodes.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2020-11-18 21:17:28 +02:00
Ismo Puustinen
8751afb6c7 sgx: add new plugin.
The SGX plugin exposes two device files as separate resources:

  * /dev/sgx/enclave   as sgx.intel.com/enclave
  * /dev/sgx/provision as sgx.intel.com/provision

The number of resources is configurable, but it's intended to be equal
to the pod count by default, so that any pod requiring access would have
it. The access control (who can do SGX remote attestation) is done
outside this plugin.

Signed-off-by: Ismo Puustinen <ismo.puustinen@intel.com>
2020-08-24 16:33:45 +03:00