Occlum PoC about enclave-cc HOT 5 CLOSED

2022/04/11:
currently, After pulling image in occlum, it needs to unpack the image by the way of mounting overlayfs, but the occum doesn't support overlayfs, so we need use unionfs as mounting type in occlum. Still have some problems about EIO error. We are trying to figure it out.

from enclave-cc.

2022/04/19:
Successfully completed pulling the image and unpacking it to bundle in the disk. The occlum team will go on mounting rootfs encrypted.

from enclave-cc.

Successfully completed pulling the image and unpacking it to bundle in the disk.

is this with an image-rs based flow?

from enclave-cc.

Successfully completed pulling the image and unpacking it to bundle in the disk.

is this with an image-rs based flow?

hi Mikko, it needs some changes in image-rs. We just need pull image and mount a directory in host(outside occlum) to a target direcotry in occlum, then put the image layer files into the target directory in occlum, then umount. We can see the image layer files encrypted by occlum in host. Application occlum can mount images layer and execute the user application included in the rootfs

from enclave-cc.

Completed and done.

from enclave-cc.