v1.1.0

• Added automatic entropy seeding support for Nitro Enclaves. This allows customers to use with no code changes applications that require entropy. The NitroSecureModule driver integrates with the Linux entropy subsystem to provide entropy on-demand, without requiring additional integration work in the application.

• Updated the Enclave Kernel to the latest microVM kernel based on the 4.14 AL2 kernel version.

• Users can retrieve information about an existing eif, including the enclave PCR values and signing certificate data, using the new describe-eif command.

• Users can now define enclave names with the --enclave-name option, and then issue nitro-cli commands using this name instead of the enclave id. Works with the console, run-enclave and terminate-enclave commands.

• Users can calculate the PCR hash for a given data file, or can process the PCR8 value for a given signing certificate, using the new pcr command.

• Having nitro-cli hang on the enclave console can now be avoided by setting a timeout value with the --disconnect-timeout option for the console command.

• Updated the tar crate to v0.4.36 and the hyper crate to v0.14.11.

• Bugfixes

  • Update the enclave boot timeout logic to consider the enclave image size.
  • Fix remote server's matching against allowlist for vsock proxy.
  • Add pylint fixes to the nitro-cli tests.
  • Verify the signing certificate of the enclave image and add explicit error
    handling.
  • Exit if the hugepages configuration fails in the nitro-enclaves-allocator
    service.
  • Set correct group ownership for /dev/nitro_enclaves in the nitro-cli spec.

• Documentation updates

  • Add refs for Nitro CLI install from sources on a set of Linux distros in the nitro-cli docs.
  • Update references to the AWS Nitro Enclaves COSE crate in the nitro-cli docs.
  • Update vsock proxy configuration file location in the vsock proxy README.
  • Update command executer sample README to reflect current state.
  • Update Nitro CLI README to include information about enclave disk space.

v1.0.12

The Github release is in sync with the aws-nitro-enclaves-cli 1.0.12-0 release from the Amazon Linux 2 extras repo.

v1.0.11

The Github release is in sync with the aws-nitro-enclaves-cli 1.0.11-0 release from the Amazon Linux 2 extras repo.

v1.0.10

The Github release is in sync with the 1.0.10-1 release from Amazon Linux 2 repo.

• Sat Feb 06 2021 Gabriel Bercaru [email protected] - 1.0.10-1

  • Changed release from 0 to 1

• Tue Feb 02 2021 Gabriel Bercaru [email protected] - 1.0.10-0

  • Removed the %posttrans scriptlet and delegated the task of
    re-performing resources initialization to a trigger script
    which runs only when uninstalling v1.0 or the package (during an update)
  • Fri Nov 27 2020 Gabriel Bercaru [email protected] - 1.0.9-0
  • Added checks for the pre & post uninstallation hooks to check
    whether an upgrade or an uninstallation is being performed

• Tue Nov 24 2020 Gabriel Bercaru [email protected] - 1.0-8

  • Added third_party directory with linuxkit credit
  • Improved 'insufficient resources' error messages
  • Updated the allocator service
  • Enforce an enclave memory lower limit of 4x the size of the EIF file
  • Added a check wrt the enclave flags, when issuing a console command

• Thu Nov 05 2020 Gabriel Bercaru [email protected] - 1.0-7

  • Updated init blob file to reflect recent init code changes

• Wed Nov 04 2020 Gabriel Bercaru [email protected] - 1.0-6

  • Improved the error messages related to file operation failures
  • Updated the documentation landing page reported in error logs

• Sun Oct 25 2020 Gabriel Bercaru [email protected] - 1.0-5

  • Refactored integration tests main scripts in order to use the allocator service

• Tue Oct 20 2020 Dan Horobeanu [email protected] - 1.0-4

  • Removed dependency on nitro_enclaves.device for the allocator service
  • Removed timeout from the allocator oneshot service

• Mon Oct 19 2020 Gabriel Bercaru [email protected] - 1.0-3

  • Updated license string to 'Apache 2.0'

• Sat Oct 17 2020 Dan Horobeanu [email protected] - 1.0-1

  • Updated license to Apache-2.0
  • General cleanup and resync with make install output

• Wed Oct 14 2020 Gabriel Bercaru [email protected] - 1.0-0

  • Include resources reservation service

aws-nitro-enclaves-cli: Release v0.1.0

Initial release of the AWS Nitro Enclaves CLI