How the application (running on the sgx-lkl) interaction with the local operating system about sgx-lkl HOT 6 CLOSED

ok ,looking forward to seeing more information about sgx-lkl in the future. Thank you @cpriebe for your reply!

from sgx-lkl.

Hi @Zxiaoyu95 ,

Yes, the disk image you provide to sgx-lkl-run is exposed inside enclave as root file system. Once inside the enclave, you have no access to any file on the host file system (on purpose). You will have to modify the disk image if you want to expose additional files inside the enclave, or create them at runtime.

If you are using the helloworld-java Makefile as a basis, you can add additional files to the disk image by modifying the $(ROOT_FS) target and add something like:

cp /host/file/sytstem/myfile $(MOUNTPOINT)/

In this example myfile would be accessible inside the enclave at /myfile.

from sgx-lkl.

Thank you @cpriebe for your reply.
Now,because my application takes up too much space,so i just use sgx-lkl to start a JVM for an application process,the rest is executed outside of sgx-lkl ,and main file on the host file system is temporary,so i link the file with image file like command:
ln -s $(MOUNTPOINT)/ /host/file/sytstem/myfile
the file is linked successfully,but when i run the process on the sgx-lkl,the error shows the file does not exist ,so i wonder if it was a sgx-lkl permission issue that caused this error.

from sgx-lkl.

Since I do not have a deep understanding of sgx-lkl, so is there any paper or document about it? I want to use this wonderful project to develop my own application, so i want to know more about it .
Thank you!

from sgx-lkl.

As I said you will not be able to access files from your host file system from within the enclave. The only option you have is to copy the file to the disk itself. Or modify SGX-LKL. It would theoretically be possible to extend it to allow you to access the host file system but that also increases the attack surface which we don't really want to do.

Regarding your second point. We are working on a write up right now but it is not available yet. That said we definitely should also improve the README as well as the information available in the wiki. We'll work on that soon.

from sgx-lkl.

I'll close this for now as the original issue has been addressed.

from sgx-lkl.