[ERROR] occlum-pal: Failed to create enclave with error code 0x2006: Invalid SGX device. Please make sure SGX module is enabled in the BIOS, and install SGX driver afterwards. (line 152, file src/pal_enclave.c) about enclave-cc HOT 5 CLOSED

The above problem disappeared after reinstalling the SGX plugin in K8s cluster. We can close this issue.

from enclave-cc.

It seems the above issue is already reported with occlum .

from enclave-cc.

Thanks for researching and reporting.

from enclave-cc.

The above problem disappeared after reinstalling the SGX plugin in K8s cluster. We can close this issue.

any suggestions if we need to improve some docs on this? the enclave-cc quickstart briefly mentions the need for and "SGX enabled cluster" and the use of sgx.intel.com/epc resource request which implies the device plugin usage.

from enclave-cc.

any suggestions if we need to improve some docs on this? the enclave-cc quickstart briefly mentions the need for and "SGX enabled cluster" and the use of sgx.intel.com/epc resource request which implies the device plugin usage.

Yes, I would like to mention the following two things about the SGX plugin REAME page.

1. There are three approaches (one with Operator and two with kubectl) to install SGX plugin. For me only the second approach (which deploys NFD and NodeFaetureRules before deploying SGX plugin) worked. The other two approaches did not report the value of sgx.intel.com/epc .
2. Regarding the above issue, after rebooting the machine, I noticed Error from server (InternalError): error when creating "https://github.com/intel/intel-device-plugins-for-kubernetes/deployments/sgx_plugin/overlays/epc-nfd/": Internal error occurred: failed calling webhook "webhook.cert-manager.io": failed to call webhook: Post "https://cert-manager-webhook.cert-manager.svc:443/mutate?timeout=10s": dial tcp 10.104.79.143:443: connect: connection refused while installing SGX plugin using the second approach although I noticed the correct value of sgx.intel.com/epc. Somehow, i managed to install SGX plugin after few trials of uninstalling/installing SGX plugin with SGX admission webhook. Not sure whether SGX admission webhook should be installed before NFD / NodeFaetureRules or just before SGX Plugin. I would suggest one to make sure the SGX plugin is installed without any error apart from seeing the correct value of sgx.intel.com/epc . Also, it should be clearly mentioned that SGX admission webhook is required for both the approaches using kubectl.

from enclave-cc.