go-hello-world

iExec Hello-World Dapp written in Golang

Standard mode

By default the application is built in Standard mode which does not use TEE capabilities.

Build

Standard mode application is built just like any other dockerized application:

docker image build -t go-hello-world .

Run

The application can be tested locally to make sure it is well setup:

rm -rf /tmp/iexec_out && \
docker run \
        --rm \
        -e IEXEC_IN=/iexec_in \
        -e IEXEC_DATASET_FILENAME=Lorem-ipsum.txt \
        -e IEXEC_OUT=/iexec_out \
        -v /tmp/iexec_out:/iexec_out \
        -v $(pwd)/iexec_in:/iexec_in \
        go-hello-world Alice

Once the execution ends, the result should be found in the folder /tmp/iexec_out.

cat /tmp/iexec_out/result.txt

TEE (protected) mode

To convert the application into TEE mode, first, it needs to be build in Standard mode as instructed in the section above. Then the produced image is converted using sconify.sh script into a newly created TEE enabled image tee-go-hello-world:

Build (conversion)

The script can be edited to change parameters like heap size, new image name, sources folder, ...

bash sconify.sh

Run

(TODO test with CAS and session)

First of all, Intel® SGX driver needs to be present on the host machine. These instructions provide information about how to install it. The application can be tested locally to make sure it is well setup:

rm -rf /tmp/iexec_out && \
docker run \
        --rm \
        -e IEXEC_OUT=/iexec_out \
        -e IEXEC_IN=/iexec_in \
        -v /tmp/iexec_out:/iexec_out \
        -v $(pwd)/iexec_in:/iexec_in \
        --device /dev/sgx_enclave \
        --device /dev/sgx_provision \
        tee-go-hello-world Alice

To get the MREnclave value of the TEE application:

docker run -it --rm -e SCONE_HASH=1 tee-go-hello-world