Skip to content

Commit

Permalink
Adds unsigned enclave binary to distribution
Browse files Browse the repository at this point in the history
The hash of the unsigned enclave will be included in the reproducible builds information, so it also needs to be part of the distribution
  • Loading branch information
italo-sampaio committed Jan 15, 2025
1 parent 2652b3d commit 512ab23
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 1 deletion.
1 change: 1 addition & 0 deletions build-dist-sgx
Original file line number Diff line number Diff line change
Expand Up @@ -50,6 +50,7 @@ echo -e "\e[33mBuilding SGX apps...\e[0m"
# since we don't actually need it in our current scheme)
$ROOT_DIR/firmware/build/build-sgx $CHECKPOINT $DIFFICULTY $NETWORK > /dev/null
cp $ROOT_DIR/firmware/src/sgx/bin/hsmsgx $HSM_DIR/
cp $ROOT_DIR/firmware/src/sgx/bin/hsmsgx_enclave $HSM_DIR/
cp $ROOT_DIR/firmware/src/sgx/bin/hsmsgx_enclave.signed $HSM_DIR/

HOST_HASH=$(sha256sum $ROOT_DIR/firmware/src/sgx/bin/hsmsgx | cut -d ' ' -f 1)
Expand Down
2 changes: 1 addition & 1 deletion firmware/build/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -70,7 +70,7 @@ For example, to build host and enclave with checkpoint `0x00f06dcff26ec8b4d373fb
~/repo> firmware/build/build-sgx 0x00f06dcff26ec8b4d373fbd53ee770e9348d9bd6a247ad4c86e82ceb3c2130ac 0x7c50933098 testnet
```

Once the build is complete, the binaries will be placed under `<HSM_PROJECT_ROOT>/firmware/src/sgx/bin` with the names `hsmsgx` for the host and `hsmsgx_enclave.signed` for the signed enclave.
Once the build is complete, the binaries will be placed under `<HSM_PROJECT_ROOT>/firmware/src/sgx/bin` with the names `hsmsgx` for the host, `hsmsgx_enclave` and `hsmsgx_enclave.signed` for the unsigned and signed enclave binaries, respectively.

### Reproducible builds

Expand Down

0 comments on commit 512ab23

Please sign in to comment.