mirror of
https://github.com/intel/intel-device-plugins-for-kubernetes.git
synced 2025-06-03 03:59:37 +00:00
24 lines
1.0 KiB
Docker
24 lines
1.0 KiB
Docker
# This Dockerfile is currently provided as a reference to build aesmd with ECDSA attestation
|
|
# but is not published along with the device plugin container images.
|
|
FROM ubuntu:22.04
|
|
|
|
RUN apt update && apt install -y curl gnupg-agent \
|
|
&& echo "deb [arch=amd64 signed-by=/usr/share/keyrings/intel-sgx.gpg] https://download.01.org/intel-sgx/sgx_repo/ubuntu jammy main" | \
|
|
tee -a /etc/apt/sources.list.d/intel-sgx.list \
|
|
&& curl -s https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | \
|
|
gpg --dearmor --output /usr/share/keyrings/intel-sgx.gpg \
|
|
&& apt update \
|
|
&& apt install -y --no-install-recommends \
|
|
sgx-aesm-service \
|
|
libsgx-dcap-ql \
|
|
libsgx-aesm-ecdsa-plugin \
|
|
libsgx-aesm-pce-plugin \
|
|
libsgx-aesm-quote-ex-plugin \
|
|
libsgx-dcap-default-qpl
|
|
|
|
RUN echo "/opt/intel/sgx-aesm-service/aesm" | tee /etc/ld.so.conf.d/sgx.conf \
|
|
&& ldconfig
|
|
|
|
ENV PATH=/opt/intel/sgx-aesm-service/aesm
|
|
ENTRYPOINT ["/opt/intel/sgx-aesm-service/aesm/aesm_service", "--no-daemon"]
|