mirror of
https://github.com/clearlinux/graphene.git
synced 2026-09-05 21:31:36 +00:00
Michał Kowalczyk
a12f96f49e
Non-PIE binaries support requires ELRANGE to start at low addresses, which on older SGX drivers required root permissions or reconfiguring the host, so this mapping strategy was made optional by us. This issue was fixed long time ago, so we can drop this option and always start enclaves at 0.
R example
This directory contains an example for running R in Graphene, including the Makefile and a template for generating the manifest. The application was tested on Ubuntu 16.04, with both normal Linux and SGX platforms.
Generating the manifest
Building for Linux
Run make (non-debug) or make DEBUG=1 (debug) in the directory.
Building for SGX
Run make SGX=1 (non-debug) or make SGX=1 DEBUG=1 (debug) in the directory.
Building with a local R installation
By default, the make command creates the manifest for the system R binary
(/usr/lib/R/bin/exec/R). If you have a local R installation, you may create
the manifest with the R_HOME variable set accordingly. For example:
make R_HOME=<install path>/lib/R SGX=1
Run R with Graphene
When running R with Graphene, please use the --vanilla or --no-save option.
Here's an example of running an R script under Graphene:
Without SGX:
./pal_loader ./R --slave --vanilla -f scripts/sample.r
./pal_loader ./R --slave --vanilla -f scripts/R-benchmark-25.R
With SGX:
SGX=1 ./pal_loader ./R --slave --vanilla -f scripts/sample.r
SGX=1 ./pal_loader ./R --slave --vanilla -f scripts/R-benchmark-25.R