mirror of
https://github.com/clearlinux/graphene.git
synced 2026-08-21 21:38:26 +00:00
Michał Kowalczyk
94caf7987e
This commit is a result of debugging a rare race condition during build
of some of our examples, which resulted in "enclave EINIT failed -
Invalid measurement" error.
It turns out that Make in versions that doesn't support the `&:`
operator ("Rules with Grouped Targets") silently ignores it and calls
the recipe for each target separately, without even a warning.
Signed-off-by: Michał Kowalczyk <mkow@invisiblethingslab.com>
81 lines
2.2 KiB
Makefile
81 lines
2.2 KiB
Makefile
# Build PyTorch as follows:
|
|
#
|
|
# - make -- create non-SGX no-debug-log manifest
|
|
# - make SGX=1 -- create SGX no-debug-log manifest
|
|
# - make SGX=1 DEBUG=1 -- create SGX debug-log manifest
|
|
#
|
|
# PyTorch and the pre-trained model must be installed on the system.
|
|
# See README for details.
|
|
#
|
|
# Use `make clean` to remove Graphene-generated files.
|
|
|
|
GRAPHENEDIR ?= ../..
|
|
SGX_SIGNER_KEY ?= $(GRAPHENEDIR)/Pal/src/host/Linux-SGX/signer/enclave-key.pem
|
|
PYTHON3 ?= /usr/bin/python3
|
|
|
|
ifeq ($(DEBUG),1)
|
|
GRAPHENE_LOG_LEVEL = debug
|
|
else
|
|
GRAPHENE_LOG_LEVEL = error
|
|
endif
|
|
|
|
DISTRIB_ID ?= $(shell lsb_release --short --id)
|
|
DISTRIB_RELEASE ?= $(shell lsb_release --short --release)
|
|
|
|
ifeq ($(SGX), 1)
|
|
ifneq ($(DISTRIB_ID),Ubuntu)
|
|
$(error This example requires Ubuntu when building for SGX.)
|
|
endif
|
|
endif
|
|
|
|
UBUNTU_VERSION = $(DISTRIB_ID)$(DISTRIB_RELEASE)
|
|
|
|
.PHONY: all
|
|
all: pytorch.manifest | pal_loader
|
|
ifeq ($(SGX),1)
|
|
all: pytorch.manifest.sgx pytorch.sig pytorch.token
|
|
endif
|
|
|
|
include ../../Scripts/Makefile.configs
|
|
|
|
# .manifest.template contains stanzas for both Ubuntu 16 and 18. The last rule selectively enables
|
|
# those lines based on the Ubuntu version detected.
|
|
%.manifest: %.manifest.template
|
|
sed -e 's|$$(GRAPHENEDIR)|'"$(GRAPHENEDIR)"'|g' \
|
|
-e 's|$$(GRAPHENE_LOG_LEVEL)|'"$(GRAPHENE_LOG_LEVEL)"'|g' \
|
|
-e 's|$$(HOME)|'"$(HOME)"'|g' \
|
|
-e 's|$$(PYTHON3)|'"$(PYTHON3)"'|g' \
|
|
-e 's|# '"$(UBUNTU_VERSION)"' ||g' \
|
|
-e 's|$$(ARCH_LIBDIR)|'"$(ARCH_LIBDIR)"'|g' \
|
|
$< > $@
|
|
|
|
# Make on Ubuntu <= 20.04 doesn't support "Rules with Grouped Targets" (`&:`),
|
|
# we need to hack around.
|
|
pytorch.sig pytorch.manifest.sgx: sgx_outputs
|
|
|
|
.INTERMEDIATE: sgx_outputs
|
|
sgx_outputs: pytorch.manifest
|
|
$(GRAPHENEDIR)/Pal/src/host/Linux-SGX/signer/pal-sgx-sign \
|
|
-libpal $(GRAPHENEDIR)/Runtime/libpal-Linux-SGX.so \
|
|
-key $(SGX_SIGNER_KEY) \
|
|
-output pytorch.manifest.sgx \
|
|
-manifest pytorch.manifest
|
|
|
|
%.token: %.sig
|
|
$(GRAPHENEDIR)/Pal/src/host/Linux-SGX/signer/pal-sgx-get-token -output $@ -sig $<
|
|
|
|
pal_loader:
|
|
ln -s $(GRAPHENEDIR)/Runtime/pal_loader $@
|
|
|
|
.PHONY: download_model
|
|
download_model:
|
|
$(PYTHON3) download-pretrained-model.py
|
|
|
|
.PHONY: clean
|
|
clean:
|
|
$(RM) *.token *.sig *.manifest.sgx *.manifest pal_loader
|
|
|
|
.PHONY: distclean
|
|
distclean: clean
|
|
$(RM) *.pt result.txt
|