topic Re:Question to Debian Users in Intel® Software Guard Extensions (Intel® SGX)

Question to Debian Users

Anandakumar — Fri, 05 Nov 2021 06:20:52 GMT

Hi All,

#Question to Intel SGX Users with Debian platform

I have been testing SGX installation and test program. Process has some difficulties, but somehow I am able to run the test app in Debian.

Now I am facing issues in VM setup with Kernel 5.14* and the Qmeu master source build.

If anyone working on the same, please share your experience with me.

#Question to Intel Support

It seems 6.1.50 Qemu documents are published but still I couldn't find release tag in the gitlab. Very few documentation available that too not upto-date.

Thanks,

Anand

Re:Question to Debian Users

JesusG_Intel — Fri, 05 Nov 2021 18:36:48 GMT

Hello Anandakumar,

As stated in https://github.com/intel/qemu-sgx:

"SGX virtualization on Qemu/KVM is under active development. The patches in this repository are intended for experimental purposes only, they are not mature enough for production use."

This means that support for this functionality is very limited, if any, and they may take a long time between updates and keeping up with the latest Qemu releases. As you can see from the dates when the files are updated, this project is not very active.

Sincerely,

Jesus G.

Intel Customer Support

Re: Question to Debian Users

Anandakumar — Mon, 08 Nov 2021 06:43:05 GMT

https://community.intel.com/t5/Intel-Software-Guard-Extensions/SGX-VM-support/td-p/1298762

In the above thread, you said that QEMU official pull request was ready and soon to be pulled.

Re:Question to Debian Users

JesusG_Intel — Mon, 08 Nov 2021 16:09:50 GMT

Hello Anandakumar,

Full KVM/QEMU upstreamed support is almost there. KVM kernel patches were upstreamed in kernel v5.13. The required QEMU patches are in the QEMU “staging” branch, so those will be released officially in v6.2.

Sincerely,

Jesus G.

Intel Customer Support

Re:Question to Debian Users

JesusG_Intel — Mon, 15 Nov 2021 23:21:02 GMT

This thread has been marked as answered and Intel will no longer monitor this thread. If you want a response from Intel in a follow-up question, please open a new thread.