evaluate migration to fortanix #553

Activity

1. brenzi commented on Dec 4, 2021

   

   brenzi

   on Dec 4, 2021

   CollaboratorAuthor

   More actions

   CC @clangenb @haerdib @mullefel
2. haerdib commented on Dec 6, 2021

   

   haerdib

   on Dec 6, 2021

   Last edited by haerdib

   Contributor

   More actions

   I totally agree. Polkadex also moved to fortanix, and is absolutely excited about it.

   I just peeked into the installation part, and I'd assume about 1 day of effort (for installation only, not changing code), including adapting the sgx-script, testing it and migration of all sgx-machines. On the assumption, that it works on Ubuntu 20.04 and 18.04.

   Regarding the coding part.. Most files, as they use normal std::xx (with some exceptions (https://edp.fortanix.com/docs/concepts/rust-std/), won't need to be touched, that's good.
   My concerns are the following:

   • Enclave tls websocket server
   • Enclave rest client
   • std::fs is not supported. So we'll need to change our enclave shard handling.
   • Cargo.toml adaption - how to allow import for std & sgx?
   • All mesalock libraries (env-logger, http, serde, mio, ...)
3. murerfel commented on Dec 6, 2021

   

   murerfel

   on Dec 6, 2021

   Last edited by murerfel

   Contributor

   More actions

   The websocket, REST and HTTP server are mesalock ports - so your number 1&2 are part of the last point. We'd have to find a solution, otherwise it won't fly.
4. brenzi

   assigned

   haerdib

   on Dec 14, 2021
5. gaudenzkessler

   assigned

   murerfel

   and unassigned

   haerdib

   on Mar 15, 2022
6. murerfel commented on May 11, 2022

   

   murerfel

   on May 11, 2022

   Contributor

   More actions

   There is an issue with certain c-native libraries in Fortanix. Through dependencies, we are currently relying on ring for cryptographic implementations. Unfortunately, ring is not supported yet by Fortnanix. See:

   • Port ring fortanix/rust-sgx#30
   • Add support for x86_64-fortanix-unknown-sgx target briansmith/ring#738