Skip to content
This repository has been archived by the owner on Nov 4, 2024. It is now read-only.

marlinprotocol/oyster-attestation-verifier-enclave

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

41 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Marlin Oyster Logo

Archival

Archived in favour of https://github.com/marlinprotocol/oyster-monorepo

Attestation Verifier Enclave

The attestation verifier enclave packages the attestation verifier along with related services in an enclave.

Prerequisites

The attestation verifier enclave is built using nix for reproducibility. It does NOT use the standard nitro-cli based pipeline, and instead uses monzo/aws-nitro-util in order to produce bit-for-bit reproducible enclaves.

The following nix experimental-features must be enabled:

  • nix-command
  • flakes

Build

# On amd64, For amd64
# The request-amd64 folder will contain the enclave image and pcrs
nix build --out-link result-amd64 ./amd64 -v -L

# On arm64, For arm64
# The request-amd64 folder will contain the image and pcrs
nix build --out-link result-arm64 ./arm64 -v -L

Cross builds

Cross builds do work, but can potentially take a really long time due to the use of qemu to emulate the target platform (can be a few hours). It should produce bit-for-bit identical enclave images compared to native builds.

# On arm64, For amd64
# The request-amd64 folder will contain the enclave image and pcrs
nix build --out-link result-amd64 ./amd64 -v -L --system x86_64-linux

# On amd64, For arm64
# The request-amd64 folder will contain the image and pcrs
nix build --out-link result-arm64 ./arm64 -v -L --system aarch64-linux

Prebuilt enclaves

amd64: https://artifacts.marlin.org/oyster/eifs/attestation-verifier_v1.1.0_linux_amd64.eif
checksum: f50bd44512132aa7a8bae6e73c8a1c2120b76061707dcc60a2196d7a3d17bb45
pcrs: https://artifacts.marlin.org/oyster/eifs/attestation-verifier_v1.1.0_linux_amd64.json

arm64: https://artifacts.marlin.org/oyster/eifs/attestation-verifier_v1.1.0_linux_arm64.eif
checksum: f390fe6a75f3fea548ae806871c2b2d64bea24bc17a445cda019dc6953c5f01f
pcrs: https://artifacts.marlin.org/oyster/eifs/attestation-verifier_v1.1.0_linux_arm64.json

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published