Port of MongoDB C client for SGX A-SKY: Anonymous and Confidential File Sharing over Untrusted Clouds
Copyright (C) 2018-2019 Rafael Pires, Sébastien Vaucher
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <https://www.gnu.org/licenses/>.
How to start a compatible MongoDB server with Docker docker run -v $( realpath ./mongodata) docker run -e SCONE_MODE=HW -e SCONE_VERSION=1 -v $( realpath ./mongodata) SCONE with Replica Set of 2 machines + 1 arbiter On the 2 SGX hosts (adapt --bind_ip): mkdir -p mongostatic
openssl req -x509 -newkey rsa:2048 -keyout mongostatic/key.pem -out mongostatic/cert.pem -days 365 -nodes
cat mongostatic/key.pem mongostatic/cert.pem > mongostatic/combined.pem
docker run --network host -d -e SCONE_MODE=HW -e SCONE_VERSION=1 -v $( realpath ./mongodata) $( realpath ./mongostatic) On the arbiter (non-SGX OK) mkdir -p mongostatic
openssl req -x509 -newkey rsa:2048 -keyout mongostatic/key.pem -out mongostatic/cert.pem -days 365 -nodes
cat mongostatic/key.pem mongostatic/cert.pem > mongostatic/combined.pem
docker run --network host -d -v $( realpath ./mongodata) $( realpath ./mongostatic)
Open a Mongo shell
Execute the following command (adapt the hosts):
rs . initiate ( {
_id : "rs0" ,
members : [
{ _id :0 , host :"sgx-2.maas:27017" } ,
{ _id :1 , host :"sgx-3.maas:27017" } ,
{ _id :2 , host :"hoernli-9.maas:27017" , arbiterOnly : true }
]
} )
Use the following connection URL in the client:
mongodb://sgx-2.maas:27017,sgx-3.maas:27017/?replicaSet=rs0&ssl=true&sslAllowInvalidCertificates=true&sslAllowInvalidHostnames=true
Configure your Docker login on Kubernetes for access to private SCONE repository: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
kubectl create secret docker-registry regcred --docker-server=<your-registry-server> --docker-username=<your-name> --docker-password=<your-pword> --docker-email=<your-email>
Create a secret for the certificate file of Mongo:
openssl req -newkey rsa:2048 -new -x509 -days 365 -nodes -out mongodb-cert.crt -keyout mongodb-cert.key
cat mongodb-cert.key mongodb-cert.crt > combined.pem
kubectl create secret generic mongo-certificate --from-file=combined.pem=combined.pem
Deploy MongoDB
kubectl apply -f mongodb-service.yml
Join the cluster from a local MongoDB shell
Port forward the first mongod to your local machine
kubectl port-forward mongod-0 27017
2. Connect to localhost:27017 with a Mongo Shell and execute the following command:
rs . initiate ( {
_id : "rs0" ,
members : [
{ _id : 0 , host : "mongod-0.mongodb-service.default.svc.cluster.local:27017" } ,
{ _id : 1 , host : "mongod-1.mongodb-service.default.svc.cluster.local:27017" } ,
{ _id : 2 , host : "mongod-2.mongodb-service.default.svc.cluster.local:27017" }
]
} ) 
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent