mirror of
https://github.com/clearlinux/graphene.git
synced 2026-09-05 21:31:36 +00:00
Li Lei
030a088892
- Forward container's LD_LIBRARY_PATH to the generated manifest - Handle special library names when generating trusted files (libxxx-xxx.so) - Add more standard files/directories to the generated manifest
127 lines
4.3 KiB
Python
Executable File
127 lines
4.3 KiB
Python
Executable File
#!/usr/bin/env python2
|
|
import os
|
|
import sys
|
|
import subprocess
|
|
import re
|
|
|
|
runtime_libs = ['libc',
|
|
'libdl',
|
|
'libm',
|
|
'libpthread',
|
|
'libutil',
|
|
'libnss_dns',
|
|
'libresolv',
|
|
'librt']
|
|
|
|
|
|
def parse_libs(bin_path):
|
|
ldd_out = subprocess.check_output(['ldd', bin_path])
|
|
lib_list = []
|
|
for line in ldd_out.splitlines():
|
|
match = re.match(r'\t(.*) => (.*) \(0x', line)
|
|
if match and match.group(1) and match.group(2):
|
|
name_match = re.match(r'([\w\d]*)(-*)([\w\d]*)(\.*)(.*)', match.group(1))
|
|
if name_match:
|
|
lib_name = name_match.group(1)
|
|
|
|
# library can be formatted as libxxx-xxx.so which is invalid format in
|
|
# the manifest, so reformat to libxxx_xxx as the option key
|
|
if name_match.group(2) == '-' and name_match.group(3):
|
|
lib_name += '_' + name_match.group(3)
|
|
|
|
if lib_name not in runtime_libs:
|
|
lib_list.append((lib_name, match.group(2)))
|
|
|
|
return lib_list
|
|
|
|
|
|
def make_executable(path):
|
|
mode = os.stat(path).st_mode
|
|
mode |= (mode & 0o444) >> 2 # copy R bits to X
|
|
os.chmod(path, mode)
|
|
|
|
|
|
def gen_manifest(app_name, bin_name, g_path):
|
|
m_path = g_path + '/LibOS/shim/test/apps/' + app_name + '/' + app_name + '.' + 'manifest'
|
|
print('generating manifest: ' + m_path)
|
|
|
|
mf = open(m_path, 'w')
|
|
make_executable(m_path)
|
|
|
|
mf.write('#!' + g_path + '/Runtime/pal_loader\n')
|
|
mf.write('loader.preload = file:../../../../../Runtime/libsysdb.so\n')
|
|
|
|
# Get path of binary
|
|
bin_path = subprocess.check_output(['which', bin_name]).strip()
|
|
mf.write('loader.exec = file:' + bin_path + '\n')
|
|
mf.write('loader.execname = ' + bin_name + '\n')
|
|
mf.write('loader.env.LD_LIBRARY_PATH = /graphene:/graphene/resolv:/host:/usr/local/lib:/usr/lib:/usr/lib/x86_64-linux-gnu')
|
|
|
|
if 'LD_LIBRARY_PATH' in os.environ and os.environ['LD_LIBRARY_PATH']:
|
|
mf.write(':' + os.environ['LD_LIBRARY_PATH'])
|
|
mf.write('\n')
|
|
|
|
mf.write('loader.env.PATH = /usr/local/bin:/usr/bin:/bin\n' +
|
|
'loader.env.USERNAME =\n' +
|
|
'loader.env.PWD =\n' +
|
|
'loader.debug_type = none\n')
|
|
mf.write('\n')
|
|
|
|
# File system setting
|
|
mf.write('fs.mount.lib1.type = chroot\n' +
|
|
'fs.mount.lib1.path = /graphene\n' +
|
|
'fs.mount.lib1.uri = file:../../../../../Runtime\n\n')
|
|
|
|
mf.write('fs.mount.lib2.type = chroot\n' +
|
|
'fs.mount.lib2.path = /host\n' +
|
|
'fs.mount.lib2.uri = file:/lib/x86_64-linux-gnu\n\n')
|
|
|
|
mf.write('fs.mount.bin.type = chroot\n' +
|
|
'fs.mount.bin.path = /bin\n' +
|
|
'fs.mount.bin.uri = file:/bin\n\n')
|
|
|
|
mf.write('fs.mount.usr.type = chroot\n' +
|
|
'fs.mount.usr.path = /usr\n' +
|
|
'fs.mount.usr.uri = file:/usr\n\n')
|
|
|
|
mf.write('fs.mount.etc.type = chroot\n' +
|
|
'fs.mount.etc.path = /etc\n' +
|
|
'fs.mount.etc.uri = file:\n\n')
|
|
|
|
mf.write('fs.mount.opt.type = chroot\n' +
|
|
'fs.mount.opt.path = /opt\n' +
|
|
'fs.mount.opt.uri = file:\n\n')
|
|
|
|
# Set Dependent Libraries
|
|
mf.write('sgx.trusted_files.ld = file:../../../../../Runtime/ld-linux-x86-64.so.2\n' +
|
|
'sgx.trusted_files.libc = file:../../../../../Runtime/libc.so.6\n' +
|
|
'sgx.trusted_files.libdl = file:../../../../../Runtime/libdl.so.2\n' +
|
|
'sgx.trusted_files.libm = file:../../../../../Runtime/libm.so.6\n' +
|
|
'sgx.trusted_files.libpthread = file:../../../../../Runtime/libpthread.so.0\n' +
|
|
'sgx.trusted_files.libutil = file:../../../../../Runtime/libutil.so.1\n' +
|
|
'sgx.trusted_files.libnss_dns = file:../../../../../Runtime/libnss_dns.so.2\n' +
|
|
'sgx.trusted_files.libresolv = file:../../../../../Runtime/libresolv.so.2\n' +
|
|
'sgx.trusted_files.librt = file:../../../../../Runtime/librt.so.1\n')
|
|
|
|
lib_list = parse_libs(bin_path)
|
|
for lib_name, lib_path in lib_list:
|
|
print('lib name: ' + lib_name)
|
|
print('lib path: ' + lib_path)
|
|
mf.write('sgx.trusted_files.' + lib_name + ' = file:' + lib_path + '\n')
|
|
mf.write('\n')
|
|
|
|
mf.close()
|
|
|
|
|
|
if __name__ == '__main__':
|
|
if len(sys.argv) != 4:
|
|
print('Usage: gen_manifest [application name] [actual binary name] [path to graphene]')
|
|
print(' e.g. gen_manifest apache httpd /home/me/graphene')
|
|
exit(1)
|
|
|
|
app_name = sys.argv[1]
|
|
bin_name = sys.argv[2]
|
|
g_path = sys.argv[3]
|
|
|
|
gen_manifest(app_name, bin_name, g_path)
|