FROM occlum/occlum:0.26.2-ubuntu18.04 WORKDIR /tmp # Using customized SGX-PFS (untrusted part modified) RUN git clone -b sgx_2.15.1_for_occlum https://github.com/occlum/linux-sgx.git && \ cd linux-sgx && \ make preparation && \ ./compile_and_install.sh no_mitigation USE_OPT_LIBS=3 && \ echo 'source /opt/intel/sgxsdk/environment' >> /root/.bashrc && \ rm -rf /tmp/linux-sgx # Download the Occlum source WORKDIR /root RUN git clone https://github.com/occlum/occlum.git && \ cd occlum && git checkout v0.26.1 && \ cp -r /root/occlum/tools/toolchains/* /tmp/ && mkdir -p /opt/occlum/ && \ cp /root/occlum/tools/docker/start_aesm.sh /opt/occlum/ ## Re-install Occlum WORKDIR /root SHELL ["/bin/bash", "-c"] RUN cd occlum && \ source /opt/intel/sgxsdk/environment && \ make submodule && \ OCCLUM_RELEASE_BUILD=1 make && \ make install && \ rm -rf /root/occlum ## Copy the demo into this image WORKDIR /root COPY demo/ snapshot-demo/ WORKDIR /root/snapshot-demo